Separate the window sentence from the wrapped error so a bad certificate file is not reported as a key mismatch.

Co-authored-by: Cursor <cursoragent@cursor.com>

station/protocol_select_test.go

@@ -25,7 +25,10 @@ func TestVersionErrorFallsBackWhenTheMaximumIs2(t *testing.T) {
 			}
 			ctx, cancel := context.WithCancel(t.Context())
 			defer cancel()
-			go func() { _ = st.Run(ctx) }()
+			go func() {
+				// Run's error is observed through State, which is the station seam.
+				_ = st.Run(ctx)
+			}()
 			refl.accept(t)
 			typ, body := refl.readFrame(t)
 			if typ != 5 || !versionIs(body, 3, 0) {
@@ -56,7 +59,10 @@ func TestVersionErrorBelow2Stops(t *testing.T) {
 			}
 			ctx, cancel := context.WithCancel(t.Context())
 			defer cancel()
-			go func() { _ = st.Run(ctx) }()
+			go func() {
+				// Run's error is observed through State, which is the station seam.
+				_ = st.Run(ctx)
+			}()
 			refl.accept(t)
 			refl.readFrame(t)
 			refl.writeFrame(t, 13, appendStr(nil, msg))
@@ -95,7 +101,10 @@ func TestDowngradeOtherThan2Stops(t *testing.T) {
 			}
 			ctx, cancel := context.WithCancel(t.Context())
 			defer cancel()
-			go func() { _ = st.Run(ctx) }()
+			go func() {
+				// Run's error is observed through State, which is the station seam.
+				_ = st.Run(ctx)
+			}()
 			refl.accept(t)
 			refl.readFrame(t)
 			refl.writeFrame(t, 6, versionWire(tc.major, tc.minor))
@@ -131,7 +140,10 @@ func TestDowngradeDoesNotCreateTheCertificateDirectory(t *testing.T) {
 	}
 	ctx, cancel := context.WithCancel(t.Context())
 	defer cancel()
-	go func() { _ = st.Run(ctx) }()
+	go func() {
+		// Run's error is observed through State, which is the station seam.
+		_ = st.Run(ctx)
+	}()
 	refl.accept(t)
 	declineTo2(t, refl)
 	if _, err := os.Stat(dir + "/funknetz"); err == nil {