Build/apply candidate images once, require digests on promote, and keep pinned env-service from rebuilding divergent images. Co-authored-by: Cursor <cursoragent@cursor.com>
Nightly and promote gates need auditable pass/product_fail/infra_fail receipts under test-reports assets, plus timed owner waivers. Co-authored-by: Cursor <cursoragent@cursor.com>