Task · GCV-0097

Exclude linked-worktree Git metadata without weakening the public-release scan

Description

Loop 22 isolated implementation cannot start: the public-release scan excludes Git directory descendants but scans a linked-worktree Git pointer file, whose machine-local administrative path is not publishable project content. Root gate passes in the normal checkout while the identical worktree gate fails before implementation.

Acceptance Criteria

Definition of Done

Implementation Plan

Reproduce on a linked worktree, exclude only Git metadata at all six working-tree search sites, verify pass and negative leak control, run required local gate and CodeRabbit, push and collect exact-SHA hosted validation.

Implementation Notes

Loop 22 root prerequisite attempt GCV-0097-impl-1: reproduced clean linked-worktree scan failure before edit, exit1. After six metadata exclusions, clean scan exit0 and ordinary working-tree refused-path negative control exit1. History git-grep paths unchanged. Required just check exit0, final Validation passed. CodeRabbit completed with 0 findings and scripts/public-release-scan.sh reviewed. Hosted evidence pending exact completing push.

Final Summary

Completing implementation SHA1e6577fd62a852cd027b9b401227d4cca51357e6; hosted Validate36776276185 completed success on that exact SHA, Validate reference and ci-success both success. Clean linked-worktree scan reproduced failure1 before fix, then passed0 after .git metadata-file exclusion at six working-tree search sites; ordinary refused-path negative control still failed1. Git history checks and actual working-tree content coverage unchanged. Local full just check exit0 ending Validation passed; bash syntax valid. CodeRabbit completed0 findings with scanner reviewed. Root prerequisite attempt1, review-repair0, infra0. This removes the infrastructure blocker for isolated implementation without changing publication rules.

View the source file on GitHub