refactor: remove dormant Git workspace write path

.github/RELEASE_CHECKLIST.md

@@ -33,8 +33,8 @@ Phase 1 requires:
 - checksums generated after each artifact reaches its final form.
 
 The convenience Desktop artifacts must not contain a Git runtime, a bundled-Git manifest, or Git/Dugite
-redistribution notices. Managed-workspace execution remains unavailable until a separately reviewed,
-ASF-compatible verified runtime is connected before admission/T1.
+redistribution notices. The retired Git executable-backed managed-workspace path must not be restored;
+future workspace execution requires a separately reviewed Gitoxide production composition before admission/T1.
 
 The first product release also requires the exact `maka-agent@<version>` npm package. The product
 tag and Draft must exist before npm staging, but the Draft must remain unpublished until npm is

.github/workflows/release.yml

@@ -462,7 +462,7 @@ jobs:
 
           These files are convenience binaries built from the approved ASF source release; they are not ASF release artifacts.
 
-          Known limitations: Computer Use and managed-workspace execution are not included in this release. The Desktop convenience artifacts do not distribute a Git runtime."
+          Known limitations: Computer Use and Gitoxide-backed workspace execution are not included in this release. The Desktop convenience artifacts do not distribute a Git runtime."
 
           if gh release view "$TAG" >/dev/null 2>&1; then
             is_draft="$(gh release view "$TAG" --json isDraft --jq .isDraft)"

.github/workflows/windows-baseline.yml

@@ -167,7 +167,6 @@ jobs:
             'packages/storage/dist/__tests__/write-queue.test.js',
             'packages/storage/dist/__tests__/marker-file.test.js',
             'packages/storage/dist/__tests__/workspace-root.test.js',
-            'packages/storage/dist/__tests__/managed-workspace-owner.test.js',
             'packages/storage/dist/__tests__/workspace-identity.test.js'
           )
           node.exe --test --test-concurrency=2 --test-force-exit --test-timeout=60000 `

.github/workflows/windows-recovery.yml

@@ -192,20 +192,3 @@ jobs:
             Write-Error 'Runtime Host recovery gate did not run exactly two passing tests'
             exit 1
           }
-
-      - name: Verify managed workspace crash recovery
-        shell: pwsh
-        run: |
-          $env:MAKA_STORAGE_STRESS = '1'
-          node.exe --test --test-reporter=tap --test-concurrency=1 `
-            --test-name-pattern="real process crash|real crash|real-process crash|crash after baseline ref publication" `
-            packages/storage/dist/__tests__/managed-workspace-baseline.test.js `
-            packages/storage/dist/__tests__/git-workspace-service.test.js `
-            2>&1 | Tee-Object -FilePath "$env:RUNNER_TEMP/managed-workspace-recovery.tap"
-          $exitCode = $LASTEXITCODE
-          if ($exitCode -ne 0) { exit $exitCode }
-          $output = Get-Content "$env:RUNNER_TEMP/managed-workspace-recovery.tap"
-          if ($output -notcontains '# tests 12' -or $output -notcontains '# pass 12' -or $output -notcontains '# skipped 0') {
-            Write-Error 'Managed workspace recovery gate did not run exactly twelve passing tests'
-            exit 1
-          }

docs/architecture/gitoxide-short-lived-helper-admission-v1.zh-CN.md

@@ -31,7 +31,7 @@
 > 打开的 object format 稳定 fail closed，且不得调用或回退到系统 Git。
 
 它不证明 source import、clone、fetch、worktree、candidate、projection、ref CAS、Write/Edit 或
-resume。现有 dormant `GitWorkspaceService` 也没有切换到该 helper。
+resume。已删除的 Git executable-backed workspace service 也不由该 helper 复活。
 
 ## 2. 为什么是 helper，不是常驻 broker
 

docs/architecture/managed-dependency-storage-authority-v1.zh-CN.md

@@ -38,7 +38,7 @@ base: upstream/main@08bcf324b
 
 - bundled npm 的实现与网络策略；
 - `node_modules/.bin` symlink 的 producer 配额扫描；
-- ManagedWorkspaceOwner/worker logical binding；
+- workspace execution owner/worker logical binding；
 - Desktop/CLI/Runtime Host 接线；
 - release packaging、audit 或 SBOM。