Short answer

A tag is a movable label; a digest identifies exact image content. Tags alone are not reproducible references.

Boundary

Record and verify the digest before running or promoting an artifact.