Real Git / headless scanner service proof for PR #16688

Pinned base: 1451e7cb23034d29774338608368a15d8845df36
Rebuilt head: dbc62573a56c3462cf5cb3c20bfb68ef49323c25
Linux x86_64, Git 2.43; actual git init --bare and git worktree add layouts.
Disposable synthetic Codex sessions only; no user data or agent execution.

Fixtures: bare.git with dev and prod linked checkouts; non-bare normal checkout
with ordinary linked checkout; managed bare worktree below isolated T3 worktrees.

BASE service output:
{
  "candidates": [
    {
      "path": "/tmp/worktree-git-08/16688-live/normal",
      "git": {
        "remoteKey": "github.com/pingdotgg/t3code",
        "repository": "pingdotgg/t3code"
      }
    }
  ],
  "imports": [
    {
      "id": "fixture-0"
    }
  ],
  "managed": []
}

HEAD service output:
{
  "candidates": [
    {
      "path": "/tmp/worktree-git-08/16688-live/dev",
      "git": {
        "remoteKey": "github.com/pingdotgg/t3code",
        "repository": "pingdotgg/t3code"
      }
    },
    {
      "path": "/tmp/worktree-git-08/16688-live/normal",
      "git": {
        "remoteKey": "github.com/pingdotgg/t3code",
        "repository": "pingdotgg/t3code"
      }
    },
    {
      "path": "/tmp/worktree-git-08/16688-live/prod",
      "git": {
        "remoteKey": "github.com/pingdotgg/t3code",
        "repository": "pingdotgg/t3code"
      }
    }
  ],
  "imports": [
    {
      "id": "fixture-0"
    }
  ],
  "managed": []
}

Assertions passed: base offers only normal; head offers normal/dev/prod with
shared origin identity. Both exclude ordinary and managed. Direct dev import
returns only fixture-0 on both revisions (import isolation already worked);
managed imports remain empty. The fix makes bare worktrees discoverable.

Production files swapped to pinned base for the same service/fixture call and
restored byte-for-byte in finally; head proof repeated after restoration.
No browser, transport, macOS, Windows, Electron, iOS or Android verification.