TEST 134

TEST-134

Stimulus

Pre-bind the current WinRM/relay/RDP loopback ports to a sentinel listener or another registered VM. Request a second native run and inject duplicate ports, wildcard host bindings, and a post-selection port race.

Required observation

The planner selects a distinct, host-loopback-only mapping and includes it in the canonical run profile before permit dispatch. Any collision/race or wildcard binding refuses without changing the permit arguments or creating a VM. After creation, the exact VM UUID reports precisely the sealed mapping; requests cannot be redirected to the existing VM.