DL-299

The :vX.Y.Z agent image is minted by digest re-tag (skopeo copy) of the newest already-published per-push :git-<sha12> artifact at-or-before the release sha (resolved by walking first-parent ancestors for a GHCR-resolvable tag, never a path-based git log) — never a second ~90m closure build; :latest stays owned exclusively by the per-push publish job; the mint shares the publish-agent-image concurrency group under queue: max + cancel-in-progress: false so a non-superseding release mint is serialized, never dropped

Status: Active (Matt, 2026-08-25)

Record: ../../infra/release/compass-unified-release-lane/design.md