A CI pipeline must promote a reviewed release artifact. Which control is most relevant?

1. One permanent administrator password in the repository
2. Versioned source, tested dependencies and controlled deployment identity
3. A mutable artifact overwritten without version records
4. Rebuilding different untracked source for each environment