rdmsm4x-changelog-20260829-0046-git-config-normalization

Normalized safe global Git defaults across the six-Mac fleet so Codex, Claude, Terminal, and other Git clients use the same identity and branch-safety behavior while credentials and live repositories remain host-local.

Scope

• Change host recorded here: rdmsm4x.
• Fleet controller host: rdmsm4x.
• Fleet targets: rdmsm4x, rdmbair13m5, rdmbair15m5, rdmpw3265m, rdmpw3275m, and jdmbair13m5.
• Excluded: GitHub tokens, Keychain entries, gh account stores, Codex/Claude auth or session state, cookies, live .git directories, repository source, branches, commits, remotes, pushes, merges, and deployments.

Files and software changed on this host

• Updated /Users/richh/.gitconfig additively; retained the existing host-specific GitHub CLI credential helper and HTTPS rewrite entries.
• Created rollback copy /Users/richh/.gitconfig.bak-git-sync-20260829-004609.
• Updated the existing Mac Fleet Cross-Agent Coordination entry in /Users/richh/Library/Mobile Documents/com~apple~CloudDocs/Codex/projects/AGENTS.md principles/PROJECTS.md with the verified Git-normalization milestone and remaining host-local login gates.
• Published /Users/richh/.agent-coordination/checkins/codex-rdmsm4x-git-config-fleet-normalization-20260829.json before mutation.
• Broadcast the sanitized completion pointer as fleet message 20260829-010334-87D9B81E and re-synchronized the completed check-in to all five peers.
• Created the versioned controller, payload, independent verifier, and one-note reconciliation helper under /Users/richh/Documents/Codex/2026-08-29/hel/work/; these are task-local reproducibility artifacts, not canonical fleet scripts.
• Created this durable record at /Users/richh/dev/LLM/Claude/changelogs/rdmsm4x-changelog-20260829-0046-git-config-normalization.md and corresponding host-local changelog files on the other five Macs.
• No software installation was needed; Homebrew gh 2.98.0 was already present.

Shared Git contract applied

• user.name=richhdoty
• user.email=105452589+richhdoty@users.noreply.github.com
• user.useConfigOnly=true
• init.defaultBranch=main
• pull.ff=only
• fetch.prune=true
• push.default=simple
• push.autoSetupRemote=true
• rebase.autoStash=true
• merge.conflictStyle=zdiff3
• rerere.enabled=true
• worktree.guessRemote=true
• File mode normalized to 600.

Commands and tooling

• Ran normalize_git_config_fleet_v1.0.0.zsh 20260829-004609 from the local Aqua Codex session.
• The controller pinned each remote computer name and ED25519 SSH host-key fingerprint before writing.
• Ran the separate read-only verify_git_config_normalization_v1.0.0.zsh acceptance verifier.
• Re-ran the controller with the same stamp to prove idempotency.

Verification evidence

• Before SHA-256: 77adcf6c8a4adfd4a2e3631852cdbb360dd5447167c05afa52813d41efbdf359; mode 600.
• After SHA-256: 0e930a5133ea8f4d53bff38bc4317c8382996052e20dd28580d648071732d909; mode 600.
• Independent verifier: VERIFY_ACCEPTED host=rdmsm4x, zero failures.
• GitHub CLI: authenticated, HTTPS workflow retained, version 2.98.0.
• Idempotent rerun: config_change=0; before and after hashes remained identical.

Undo

Restore the exact prior file with cp -p /Users/richh/.gitconfig.bak-git-sync-20260829-004609 /Users/richh/.gitconfig, then re-run git config --global --list --show-origin to verify the rollback.

Apple Notes persistence

• The required note exists exactly once in the iCloud Notes folder rdmsm4x with title rdmsm4x-changelog-20260829-0046-git-config-normalization.
• The installed helper first created an additional normalized-title note in llmlog, contrary to the governing per-host-folder rule. That exact new duplicate was removed by its Notes object ID after title reads proved truncated; the deletion is recoverable through Recently Deleted.
• Final verification returned correct_host_folder_count=1 and llmlog_matching_count=0.

Outstanding owner actions

• None on this host for GitHub CLI authentication.
• Continue using one writer per branch/worktree and move cross-Mac work through clean commits and explicit handoffs; do not synchronize live repositories with cloud-file tools.