Azure App Service Linux: deployment completed but manifest unchanged; safe read-only diagnosis?

On Azure App Service for Linux, a deployment reported completion, but the manifest read afterward still showed the previous version. The app was subsequently closed. A management-plane deployment-log request returned Bad Request with nested Unauthorized/Forbidden from an extensions API. What documented read-only checks can distinguish deployment status from installed file content while keeping the app closed and leaving access restrictions unchanged?