Guard human recovery by commit author

[svarlamov]

Summary

• guard terminal known-human recovery so it only applies when the commit author matches the local human identity
• accept either the configured git-ai identity or the already-cached raw Git identity, comparing email case-insensitively
• reuse commit metadata already read by the commit-metadata recovery solver and consult identity cache without initialization, adding no Git calls or I/O
• cover remote fast-forward attribution and git-ai author overrides with TestRepo regressions

Why

A fast-forward ref update can finalize attribution for a pulled commit while passing the local user as human_author. When that remote commit had no AI attribution, terminal recovery could previously record its unknown lines as typed by the local user. The fallback now fails closed for other-authored commits while still recognizing locally authored commits when a git-ai author override or email casing makes the display identity differ.

Validation

• task test
• task test TEST_FILTER=test_fast_forward_update_ref_does_not_attribute_remote_commit_to_local_user
• task test TEST_FILTER=terminal_recovery
• task test TEST_FILTER=test_commit_metadata_recovery_ignores_freeform_message_agent_mentions
• task test TEST_FILTER=test_cherry_pick_conflict_ai_rewrite_resolution_is_attributed (5 consecutive runs)
• task lint
• task fmt
• git diff --check

[svarlamov]

• Guard human recovery by commit author #2062 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.