Keep the three certified consumer-backed rows by id, image, and evidence. Allow at most one pending row, and only when it is the upstream.json image.
Keep the three certified consumer-backed rows by id, image, and evidence. Allow at most one pending row, and only when it is the upstream.json image.