If you use Git without a precise user.name and user.email setup, the blame lines and authorship records in your repository are already compromised. This is the problem of Git user config dependent workflows: the identity tied to a commit depends on whatever the local configuration happens to be at the time.
Git determines commit authorship in three layers: local repository config, global config, and system config. If none are set, Git falls back to environment variables. This means the same engineer can commit under multiple names or emails without realizing it. The result: search, history, and review audits become unreliable.
Projects with multiple contributors are especially vulnerable. A developer may have one set of credentials for personal projects but forget to switch before pushing to a company repo. Automated tooling that relies on git log becomes polluted with mismatched identities. Merge conflicts become harder to resolve because it’s not clear who wrote what.
The fix starts with enforcing a consistent user config. Set the correct values explicitly: