A common concern is having certainty that a deployment put into production is the same as what was tested. One way to support such a guarentee would be to have a sealed/signed deployment notion that provides a functionality similar to a sealed jar. If the deployment signature does not match that calculated, the deployment immeadiately fails.