Which Hugging Face loading practice gives the strongest reproducibility boundary?

Which Hugging Face loading practice gives the strongest reproducibility boundary?

1. Pin a reviewed commit hash and load the tokenizer, configuration, and weights from that same revision
2. Use the default branch without recording its resolved commit because branches never move
3. Mix the newest tokenizer with cached weights from an unknown revision