Software Supply Chain
Release Immutability
Also: immutable releases
A setting that stops a published release from being edited or having its files replaced after it goes out.
In more detail
Without it, an attacker with access can swap the files attached to an existing version and even replace the checksum file next to them, so verification against the published checksum still passes. With it, a changed file has to ship as a new version that people can notice.