A team wants to delete old container images. Which retention decision is safest?

1. Keep only mutable tags and discard every immutable identity record.
2. Preserve images needed by active deployments and agreed rollback or audit windows.
3. Delete every image older than the most recent build regardless of deployment state.
4. Delete release metadata before checking deployed versions.