An artifact retention job keeps the image and removes the detached attestation during a failover rehearsal

The primary artifact remains available while admission or provenance checks lose the supporting proof they depend on. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.