A release needs promotion from test to production. Which approach best preserves what was tested?

1. Edit the container image interactively after test approval.
2. Recompile manually on each production server with untracked dependencies.
3. Deploy whatever image a mutable tag references at execution time without verification.
4. Promote the same verified artifact and vary only controlled environment configuration.