## The problem
The Cerbos sidecar (git-pull) fails refreshing git-based policies with: "Failed to pull from remote", worktree contains unstaged files. Policy updates stop being pulled into the PDP.
## The fix
The checkout directory contains unstaged content, usually inherited from the source git repository itself (e.g. a .gitignore added later or stray files committed in history), the underlying git library cannot pull over it. Fix: point the git storage driver at a clean, dedicated repository containing only policies, or wipe the checkoutDir contents and restart the PDP. The reporter verified a fresh policy repo restored automatic reloads.