A matrix release publishes the right artifacts but the production deploy reuses staging metadata

A signed release pipeline shows matching artifacts and later production deploys an older or partially updated manifest.