ADR · accepted

Exactly one production workflow may create immutable site release tags

Deployment, production verification, certification and immutable tagging remain ordered gates; legacy tag automation is read-only and cannot create or move tags.