Pin the .NET SDK with a deliberate roll-forward policy
Commit global.json and choose whether builds require an exact SDK or may use newer installed patches or feature bands.
Deployment
Attach build identity to operational telemetry
Stamp telemetry with the immutable build that produced it so incidents can be compared across releases and rolling deployments.