The sandbox initialization now detects and scrubs "planted" bare-repo files (directories like HEAD, objects, refs, etc.) that could be mistakenly treated as git repository internals.
Evidence
Scrubbing function (search for "scrubbed planted bare-repo file")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
