A deployment pipeline rebuilds an inference image from floating dependencies after model approval. Production behavior differs from testing. Which practice best prevents this?

1. Record only the build timestamp and discard dependency versions.
2. Keep rebuilding until a production request happens to pass.
3. Promote the tested immutable image digest and model artifact together.
4. Use one mutable latest tag as proof of identical image contents.