The platform image

Continuous · Stable · None, with a pinned tag. Production pins and rolls through an approved operation.

Each installed package

Auto · Notify · None, seeded per instance and then held per package. Production reminds; an administrator lands the update from the catalogue card.

Why separate

A pinned image used to mean pinned everything. One switch could not express “hold the platform, take the fix” — two can.