Data scientists on a team start every training script with a block of pip install commands. The same script run two weeks apart produced noticeably different evaluation metrics, and nobody can now determine which package versions the earlier run used. What should the team adopt so that a job's software dependencies are reproducible and auditable later?