- Separate 'Build and push' into 'Build production image' (build only) and 'Push image' steps - Creates insertion point between build and push for hygiene assertions (Task 2) - Preserves --target production, Dockerfile path, both tags, and root context - WR-04 immutable-tag-first push ordering preserved in push step