Facepalm moment: realizing that flock(2) doesn’t block across threads inside of a process, only across multiple processes, and adding an MVar lock to Gitson about a year after writing the original code.