tests/test_git_ops_default_roots.py is the D13 hook suite (pre-init roots
follow the env per call; pinned roots win; the _log_supervisor writer
lands in the env root; the issue #455 subprocess repro under a throwaway
HOME). tests/test_hermetic_data_root.py pins the class: append_jsonl
fails closed on a live-root write, and the serial E2E pin runs the exact
leaking suites under throwaway HOME + full env isolation with an empty
pre/post inventory delta of the live-shaped root. All six pins verified
RED on a git-archive copy of base 8827fd2c. D13 flips pending->done;
lane section appended to LEDGER_CORRECTIONS.
