Two corrections to packages/mosaic/framework/tools/git/README.md.
1. The "--login override" section still described the guessed-login fallback that
#1352 removed: "falling back to the repo host's credential when no login is
named". That is no longer what happens and it describes the defect as though
it were the design. With no --login there is now no tea lookup at all; the
acting credential is the calling identity's own via get_gitea_token, with no
fallback. #1352 should have carried this edit and did not.
2. New "Running these tests" section. MOSAIC_GIT_IDENTITY is inherited into each
test's sandbox HOME and the tests disagree about which value they need, so no
ambient value passes all 29. Measured on next at a480ee83 across two full
passes differing only in that variable: six fail with it exported, one fails
with it unset, and the failing sets are disjoint. The six hit the documented
fail-closed refusal from a state they never intended; issue-close-fail-closed
asserts the opposite and needs the identity set. Both directions read as
wrapper regressions rather than as environment, and two seats independently
misdiagnosed them as a patch defect while reviewing #1352.
The durable fix is for each test to control its own value; filed as #1353. This
documents the split so a red run is diagnosable in the meantime, and states
plainly that "the suite passes" is not a claim anyone can make here without
naming the ambient value behind it.
Formatting verified with the lockfile-pinned [email protected] (no install in this
worktree, so npx with the pin named). Control: a deliberately malformed file
returns rc=1 from the same command.
fred