I can see that. A human specifiable name is important. My proposal is that each time an image is pulled, the hash is recorded and retained even if the underlyi

I can see that. A human specifiable name is important. My proposal is that each time an image is pulled, the hash is recorded and retained even if the underlying container image is removed. When the same image is pulled again, if the files change from the previous hash, either fail or warn the user. I can see how pinning to a specific patch version is not a great idea and that "python:3.11" keeps people from pinning to an insecure version.