In cases where we had switched to master (or thought we had) and in reality the switch to master failed.

Verifying the sha between the local and remote master seems the sure fire way of verifying we are actually  tagging the remote master.