From fc0434d111bee3b5ef25ebf9ef6d05477abd2118 Mon Sep 17 00:00:00 2001
From: Teknium <127238744+teknium1@users.noreply.github.com>
Date: Mon, 5 Oct 2026 07:28:01 -0700
Subject: [PATCH] test: the pause record's git resolver is a reviewed
 resolution site

update_pause_record._git_executable reads the paused gateways' checkout outside the updater, where
install.ps1's PM-staged git is not on PATH, so it falls back to that staged git after PATH. Same
shape and reason as hermes_cli._early_recovery._git_executable (#132361), which it becomes once
both land; the managed-runtime ratchet needs the row until then.
---
 tests/fixtures/resolution_allowlist.json | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tests/fixtures/resolution_allowlist.json b/tests/fixtures/resolution_allowlist.json
index 9c16870afe..dfdb7c2b45 100644
--- a/tests/fixtures/resolution_allowlist.json
+++ b/tests/fixtures/resolution_allowlist.json
@@ -688,5 +688,11 @@
     "path": "tools/file_operations_lint.py",
     "symbol": "LintMixin._run_managed_node_linter",
     "kind": "bare_which"
+  },
+  {
+    "path": "hermes_cli/update_pause_record.py",
+    "symbol": "_git_executable",
+    "kind": "bare_which",
+    "reason": "gate reads of the paused gateways' checkout run outside the updater, where install.ps1's PM-staged git is not on PATH; falls back to that staged git (moves to hermes_cli._early_recovery._git_executable when #132361 lands)"
   }
 ]