A container tag can look like one deployable object while actually naming an OCI image index: a small content-addressed document whose descriptors point to separate manifests for AMD64, ARM64, 32-bit ARM, and other platforms. Pulling first and diagnosing later wastes transfer time and turns a release-admission question ...