A green CI run does not prove that the artifact built from reviewed source matches what production later exposes. The build job may have produced one directory while the deploy job selected another. A file may have been added after review.
Source: [Dev.to](https://dev.to/shikiyusuke/a-real-deployment-exposed-two-contract-defects-before-i-froze-the-contract-2pao)