[Model behavior] Ran a git pull on the main branch without an explicit order in that turn, despite a loaded ban on inferring git-write permission (recurrence of #100312)

What happened
The loaded rules ban git write operations on the main branch without an explicit order in the current session, and say to stop and ask when a task seems to need one. Asked to apply a fix, the model ran git pull --ff-only on main itself, relying on an earlier, different instruction in the same session.

Expected
Ask before the pull, or edit without it.

Impact
A hard ban becomes conditional on the model's own reading of earlier context.