HUB-EXCHANGE-OVER-GIT 4: the site's push doc says when it writes a tracking ref #61

One doc comment changes: the site's push over the hub's socket writes no index, and writes a tracking ref only where the site's own git config names a remote at that URL, in the site's repository with the site's rights.

No behaviour changes. The site's push and fetch keep every pin the exchange already set (the pack's tuning, core.hooksPath=/dev/null, no lazy fetch, the fd transport alone), and a hook the site itself writes may still run in the site's own git, with the site's rights and never more.

---

HUB-EXCHANGE-OVER-GIT, subunit 4. Plan: https://tangled.org/notplants-bot.bsky.social/lichen-orchestrator/blob/main/machine-docs/plans/HUB-EXCHANGE-OVER-GIT-2026-11-01.md

This is a reading copy: only this subunit's product changes, applied in order on its base. Nothing here is to be merged.

Source PRs on lichen.page.review (product), in order, with their original descriptions #

• #3608 s/982-hxg-u4-site-hooks-fixup — The site's push doc says when it writes a tracking ref

  This PR changes one doc comment: the site's push over the hub's socket writes no index, and writes a tracking ref only where the site's own config names a remote at that URL, in the site's repository with the site's rights (measured on git 2.54 and 2.55). Its branch first stopped the hooks that the site's git config names from running in the site's push and fetch over the hub's socket. Then the operator ruled that a hook the site writes may run in the site's own git, with the site's rights, and never with more. So the branch reverts that change and keeps the exchange as unit 3 left it. The site's push and fetch keep every pin that unit 1 and unit 2 set (the pack's tuning, core.hooksPath=/dev/null, no lazy fetch, the fd transport alone). The tests PR shows the rule for each git of the exchange.

Commits #

• e6cfd0be5 HXG 4: hxg-u4-site-hooks-fixup (#3608)

Count and shas #

count-product-code-lines c579dd6f909d..e6cfd0be58f0: NET +0 · counted +0 -0 · moved out of the counted set +0 · comment-only deletions flagged 1 · macros flagged 0 · tests-folder code flagged 0

Base c579dd6f909db36ac7e454d9d4d33426fc97dcfc (tip of s/983-od-u6g-ssr-error-tests). Head e6cfd0be58f061c4960b98b312b082b99a09dae2. 1 files changed.

Check #

Every changed file is a file one of the product PRs changed, and each is identical at the head to the same file at the last product branch s/982-hxg-u4-site-hooks-fixup.

Resolved/noted: #3608: the source branch also contains merges of stack, which are not included here; only its own three commits (bad1f4dc, a724af80, b308bcf2) were applied, one by one. The second reverts the first (the branch first stopped hooks named by the site's git config, then the operator ruled that such a hook may run in the site's own git), so the net change is the doc comment alone.