An artifact has the expected version label but fails its recorded checksum. What should the pipeline do?

1. Stop promotion and investigate the integrity mismatch.
2. Grant the artifact reader administrator access.
3. Ignore the mismatch because the filename is correct.
4. Update the expected checksum without reviewing the changed artifact.