A CI pipeline signs a release artifact. What must the deployment process verify before trusting the signature?

1. The signature, trusted signer identity, and the artifact being deployed
2. That the artifact filename contains the current date
3. Only the deployment server's storage capacity
4. Only the fact that a signature file exists