A container image includes a private signing key in an earlier image layer, then deletes it in a later layer. What should the team assume?

1. The key may remain recoverable from image history and must be treated as exposed.
2. Public registry access is safe because the final filesystem omits the file.
3. The earlier layer is guaranteed to be cryptographically erased.
4. A shorter image tag removes historical contents.