A team must identify the exact source revision used for a production release. Which Git construct is a suitable immutable reference when governed against later movement?

1. A pipeline's display color
2. A protected release tag pointing to the released commit
3. The current tip of a constantly changing feature branch only
4. A developer's local uncommitted files