Approval workflow promotes the wrong artifact

The review step is followed correctly, but the production deployment still uses the wrong image because the artifact reference is re-evaluated after a newer build already exists.