GET /.well-known/apple-app-site-association
iOS universal-links manifest. Served as application/json with a single applinks block, an appID in TEAMID.bundle format, and a non-empty paths array. Apple's verifier should accept without warnings.
expect: 200 OK, Content-Type: application/json. Body is a valid AASA document with a syntactically correct appID (clearly fake — catastrophic.io has no real iOS app).
headers
body