rdmpw3265m-changelog-20260829-0046-git-config-normalization

Normalized safe global Git defaults on rdmpw3265m and installed the Intel Homebrew GitHub CLI, without copying credentials or touching repositories.

Scope and exact changes

• Updated /Users/richh/.gitconfig additively with the twelve-key shared fleet Git contract: richhdoty noreply identity, user.useConfigOnly, main, fast-forward-only pulls, fetch pruning, simple/upstream pushes, rebase autostash, zdiff3, rerere, and worktree remote guessing.
• Changed /Users/richh/.gitconfig mode from 644 to 600.
• Created /Users/richh/.gitconfig.bak-git-sync-20260829-004609.
• Installed Homebrew formula gh 2.98.0 at the Intel path /usr/local/bin/gh.
• Did not alter credentials, Keychain, ~/.config/gh/hosts.yml, AI auth/session state, repositories, .git directories, branches, commits, remotes, or source files.

Commands and verification

• Fleet controller: normalize_git_config_fleet_v1.0.0.zsh 20260829-004609; Homebrew ran as richh, not root.
• Before SHA-256: 7fa0dc4c9dc05f46408cdc177ca9e9b5ace1fabcb75cc51bdf44293a363bd123; mode 644.
• After SHA-256: 464f4180e4833e9e770afd5af08a9f9d897d9ad605f32b161de678d9189c7e0a; mode 600.
• Independent verifier: zero failures and VERIFY_ACCEPTED host=rdmpw3265m.
• Idempotent rerun: config_change=0, with an unchanged after hash.
• GitHub CLI authentication remains deliberately host-local and requires owner login.

Undo

• Restore Git config: cp -p /Users/richh/.gitconfig.bak-git-sync-20260829-004609 /Users/richh/.gitconfig.
• If the new CLI is unwanted, remove it with brew uninstall gh; do not delete account or Keychain state as part of that rollback.

Outstanding owner action

From an interactive session on this Mac, run gh auth login --hostname github.com --git-protocol https --web, then gh auth setup-git and gh auth status. Never reuse an Apple Silicon credential-helper path here.