rdmbair13m5-changelog-20260829-0046-git-config-normalization

Normalized safe global Git defaults on rdmbair13m5 and installed GitHub CLI through Homebrew, without copying credentials or touching repositories.

Scope and exact changes

• Updated /Users/richh/.gitconfig additively with the twelve-key shared fleet Git contract: richhdoty noreply identity, user.useConfigOnly, main, fast-forward-only pulls, fetch pruning, simple/upstream pushes, rebase autostash, zdiff3, rerere, and worktree remote guessing.
• Changed /Users/richh/.gitconfig mode from 644 to 600.
• Created /Users/richh/.gitconfig.bak-git-sync-20260829-004609 with the exact pre-change content and metadata.
• Installed Homebrew formula gh 2.98.0 at /opt/homebrew/bin/gh.
• Homebrew's normal pre-install auto-update refreshed one existing tap (homebrew/cask); it reported no other package upgrade or installation.
• Did not alter GitHub tokens, Keychain, ~/.config/gh/hosts.yml, AI auth/session state, repositories, .git directories, branches, commits, remotes, or source files.

Commands and verification

• Fleet controller: normalize_git_config_fleet_v1.0.0.zsh 20260829-004609; remote payload ran as richh, never root.
• Before SHA-256: 5d3387b60cc3df22349ed6a8a8227f7ce6c565a7c8d89a649c7cc6ae33cc2f1c; mode 644.
• After SHA-256: ed346f916ff0095426ea8de17e46a9ec2e61b5722d64583b686661f8d39e9355; mode 600.
• Independent verifier: zero failures and VERIFY_ACCEPTED host=rdmbair13m5.
• Idempotent rerun: config_change=0, with an unchanged after hash.
• GitHub CLI installed successfully; authentication remains deliberately host-local and currently requires owner login.

Undo

• Restore Git config: cp -p /Users/richh/.gitconfig.bak-git-sync-20260829-004609 /Users/richh/.gitconfig.
• If the newly installed CLI is unwanted, remove it with brew uninstall gh; do not delete any account or Keychain state as part of that rollback.

Outstanding owner action

From an interactive session on this Mac, run gh auth login --hostname github.com --git-protocol https --web, then gh auth setup-git and gh auth status. Do not copy another Mac's login files.