Your company is developing a web-based application and is focused on ensuring that production deployments are traceable and auditable back to the specific source code commits. This means that at any point, you should be able to identify which code changes are running in production by reviewing the deployment logs. What should you do?