Execution environments, now with 40% fewer surprises
Unpinned EEs rebuild the dependency mess inside a container.
Execution environments were meant to end dependency drift. They do, if you pin things.
Build from a latest base image with unpinned collections and you've moved the old problem into a container.
Pin, rebuild on a schedule, test, then promote.