Two builds push different images using the same latest tag. What best prevents deployment ambiguity?

1. Deploy a verified image digest or controlled immutable version.
2. Identify the image only by its compressed size.
3. Assume latest always refers to the previously tested image.
4. Rebuild source independently in production without recording its outputs.