The trick to remember though is that new clones don't have any "update" check, they only see and fetch the latest value. There's no force push audit log for git

The trick to remember though is that new clones don't have any "update" check, they only see and fetch the latest value. There's no force push audit log for git refs in most git server software, there's just "local and remote refs disagree". That's not really an "update check" from the perspective of "having an update notification or update event".