The git diff that wasn't read-only: what building ClonePeek taught us

We were building a tool whose defining promise was simple: inspect unfamiliar repository configuration without executing its code. Then a test revealed that an ordinary-looking Git operation could lau