Retain only the verified production latest image

tests/test_production_deploy.py

@@ -253,13 +253,13 @@ def test_lock_conflict_never_activates_production(tool, monkeypatch):
         tool.deploy()
 
 
-def test_image_retention_protects_containers_rollback_and_other_tags(tool, monkeypatch):
+def test_image_retention_keeps_latest_and_protects_other_containers(tool, monkeypatch):
     tool.state = {"previous_image": "previous"}
     release = "pigway-frame-flow:release-" + "a" * 40 + "-" + "b" * 8
     rollback = "pigway-frame-flow:rollback-" + "c" * 32
     tool.state["rollback_tag"] = release + "-rollback"
     images = [
-        {"Id": "current", "RepoTags": [release]},
+        {"Id": "current", "RepoTags": ["pigway-frame-flow:latest", release]},
         {"Id": "previous", "RepoTags": [release + "-rollback", release, rollback]},
         {"Id": "stopped", "RepoTags": [release]},
         {"Id": "obsolete", "RepoTags": [release, rollback]},
@@ -273,7 +273,15 @@ def test_image_retention_protects_containers_rollback_and_other_tags(tool, monke
         if args == ("ps", "-aq"):
             data = "container1 container2"
         elif args[0] == "inspect":
-            data = json.dumps([{"Image": "current"}, {"Image": "stopped"}])
+            data = json.dumps(
+                [
+                    {
+                        "Image": "current",
+                        "Config": {"Image": "pigway-frame-flow:latest"},
+                    },
+                    {"Image": "stopped"},
+                ]
+            )
         elif args[:2] == ("image", "ls"):
             data = "current previous stopped obsolete shared ci"
         elif args[:2] == ("image", "inspect"):
@@ -285,7 +293,8 @@ def test_image_retention_protects_containers_rollback_and_other_tags(tool, monke
     monkeypatch.setattr(tool, "run", run)
     tool.cleanup_images()
     assert [c for c in calls if c[:2] == ("image", "rm")] == [
-        ("image", "rm", release, rollback),
+        ("image", "rm", release),
+        ("image", "rm", release + "-rollback", release, rollback),
         ("image", "rm", release, rollback),
     ]