diff --git a/app.py b/app.py
index f30c0df..2868e70 100644
--- a/app.py
+++ b/app.py
@@ -594,7 +594,8 @@ def api_avatar():
                 pass
 
     if not avatar_data or len(avatar_data) < 100:
-        with open(sentinel, 'w'): pass
+        with open(sentinel, 'w'):
+            pass
         return '', 404
 
     # Validate JPEG magic bytes (FF D8 FF)
diff --git a/tests/test_diagnose.py b/tests/test_diagnose.py
index fe5caca..04b0395 100644
--- a/tests/test_diagnose.py
+++ b/tests/test_diagnose.py
@@ -9,9 +9,9 @@ from diagnose import DiagnosticsRunner  # noqa: E402
 # ── build_ssh_command ────────────────────────────────────────────────────────
 
 class TestBuildSshCommand:
-    def test_contains_stricthostkeychecking_no(self):
+    def test_contains_stricthostkeychecking_accept_new(self):
         cmd = DiagnosticsRunner.build_ssh_command('10.0.0.1', 'eth0')
-        assert 'StrictHostKeyChecking=no' in cmd
+        assert 'StrictHostKeyChecking=accept-new' in cmd
 
     def test_contains_host_ip(self):
         cmd = DiagnosticsRunner.build_ssh_command('10.0.0.1', 'eth0')