GET /.well-known/assetlinks.json
Android App Links manifest. Single statement asserting delegate_permission with a get_login_creds relation, a well-formed android_app target including SHA-256 fingerprint in the standard colon-delimited 64-byte hex format.
expect: 200 OK, Content-Type: application/json. Body is a valid assetlinks.json document; the fingerprint is clearly a placeholder.
headers
body