What sort of sane system modifies the build output after testing? Our release process is more like: build and package, sign package, run CI tests on signed pac

What sort of sane system modifies the build output after testing? Our release process is more like: build and package, sign package, run CI tests on signed package, run manual tests on signed package, release signed package. The deployment process should check those signatures. A test process should by design be able to detect any copy errors between test and release in a safe way.