In the case of a shared deployment server there may be locally committed changes in the repository for security patches that haven't been released to the public. We can record the set of local commits into the lock file, then upon the sync stage we can check for these commits in the current checkout before tagging. If local changes are missing, we can prompt the user for confirmation that it was intended.