Git Identity Guard

Installs a git shim ahead of the real binary in $PATH that inspects every commit, commit-tree, and push invocation and refuses to let one through under the wrong author/committer identity - regardless of what tries to set one.

The problem this solves

A documented rule ("always commit as you <you@example.com>") is not self-enforcing. On a real campaign, this showed up as: