Ridgefield is releasing a new ingestion container that can affect downstream data quality. It wants limited initial exposure and rapid reversal while preserving compatibility. Which delivery strategy fits?

1. A validated canary rollout with monitored acceptance criteria and a compatible rollback version.
2. Assume container startup success proves all downstream data contracts remain valid.
3. Deploy a mutable latest tag without recording the image digest.
4. Replace every instance simultaneously and examine results next week.