A production policy requires images signed by trusted build identities. What enforces the policy before workload creation?

1. A mutable latest tag
2. A larger container CPU request
3. A comment naming the build team
4. An admission verifier checking image signatures and trust policy