Nine images across seven modules name a tag, not a digest. ADR 0006 forbids it and the host refuses it by name — and the refusal has never fired in a bed, because the lab pushed every image into its own registry and rewrote every reference to the digest it had just assigned. The harness was supplying the property under test. Found by deleting the harness. Claude-Session: https://claude.ai/code/session_01LrgweAeERJYBg88c5cKDzF