A security policy requires only approved signed serving containers. Which capability should be evaluated?

1. An image tag called trusted with no validation
2. Model-deployment container signing with validation against configured OCI Vault keys
3. A signed email naming an image without runtime verification
4. A model name containing the key's last four characters