Why separate image building from deployment approval?

1. To avoid recording any release history
2. To promote the same tested artifact with controlled authorization
3. To grant every contributor production administration
4. To ensure each environment runs unrelated source code