The direct metadata read can be denied in the service's rootless context even when the directory is already correctly owned, which kept the reconciler calling sudo chown on the same Postgres volume every minute. A root fallback gives the guard a reliable answer on deployed nodes while remaining much cheaper than a recursive chown. Co-Authored-By: Claude <noreply@anthropic.com>