omind 3.8.3 — guard: cross-repo freshness (git -C), multi-repo marker, inert-gate allowlist

Fixed

• git -C <dir> is now honored for freshness attribution, not just recognition (#147): git -C <repo> fetch records freshness for the -C target repo instead of the shell's cwd repo, so cross-repo work is satisfiable from a cwd-pinned session. The same parsing tightens the check side. Scoped to commands whose first token is literally git; relative and repeated -C resolve with git's own cumulative semantics; any parse trouble falls back to cwd (fail-open).
• git -C <repo> commit/push/... is now classified as repo work at all (#147): the write-verb and side-effect regexes required the verb immediately after git, so -C/-c forms bypassed the rules-note, freshness, and capability checks entirely.
• The per-turn freshness marker is now a set of repos (#147): fetching repo B no longer evicts repo A's same-turn freshness. The pre-3.8.3 single-slot payload is still read.

Changed

• A tight allowlist of provably-inert inspection commands skips the consult-gate (#147): bare pwd, whoami, id, date (read forms), uname, hostname (bare), which/command -v, git --version, true/false. Any shell metacharacter disqualifies; echo is excluded by design; the exemption does not satisfy the gate.

Proudly Made in Nebraska. Go Big Red! 🌽 https://xkcd.com/2347/