[jmjava]

Summary

• git ls-files failing, or git missing, returned an empty file list, and the committed-address check treated that as a clean tree.
• The scan now fails closed when the listing cannot be read. A caller that passes an explicit file list is unchanged, including an empty list.

Test plan

• Mocked nonzero git ls-files and OSError both fail committed_ips (they passed before this change)
• tests.test_safety and tests.test_deployment_safety_ci pass with no live Ollama
• CI unit and mutation checks green

Made with Cursor