Darkwing found the brief had the host run unconfined git in a clone the session writes. The brief now requires a clean git environment, hook and fsmonitor overrides, an lstat walk of .git, a config-key allowlist and a session-live check, and adds bundle.mjs and a harness test to the files. Co-Authored-By: Claude Opus 5.5 <[email protected]>