The environment I'm working in is light on process control. Specifically, more than once I've discovered that the version of a web app running in our Acceptance Test environment is not the same as the one in the repository from which we deploy to production. If I can't be absolutely sure that the .war I'm about to deploy to production is the same as the one that passed Acceptance Testing, in my eyes the Acceptance Test results are completely invalid.
What I'd like to know is: Does Tomcat keep an unmodified copy of the deployed .war somewhere -- or even a signature (MD5, etc) of it -- that I can compare to my known .war, so that I can be sure the one I'm about to deploy is the same as the one running in Test?