Question 530
A retail team builds containers separately for staging and production, so tests verify a different digest than the released image. Which limitation must be considered before claiming the issue is fully resolved?
Explanation
Correct Answer
Identical source commits do not guarantee identical binary artifacts across rebuilds. This caution prevents extrapolating beyond the specific evidence or product boundary. Reliable implementation depends on artifact identity and controlled promotion. The unresolved point should be tested using CI provenance, artifact digests and environment promotion logs rather than assuming a working interface proves full compliance or resilience.
Incorrect Answers
Source version tracking alone proves the production binary was tested. This limitation is framed as a blanket exception, but the case requires a different, narrower caution. The relevant boundary is that identical source commits do not guarantee identical binary artifacts across rebuilds. Reliable implementation depends on artifact identity and controlled promotion. Inspect CI provenance, artifact digests and environment promotion logs.
Artifact immutability can be proved solely by a human-readable version name. The proposed claim mistakes an incomplete signal or product feature for a universal guarantee. The relevant boundary is that identical source commits do not guarantee identical binary artifacts across rebuilds. Reliable implementation depends on artifact identity and controlled promotion. Inspect CI provenance, artifact digests and environment promotion logs.
A cryptographic signature automatically certifies code behavior and reliability. This claim exceeds the evidence and ignores an important risk or operational dependency. The relevant boundary is that identical source commits do not guarantee identical binary artifacts across rebuilds. Reliable implementation depends on artifact identity and controlled promotion. Inspect CI provenance, artifact digests and environment promotion logs.