I wonder if you've considered the wrinkle of anna-install being run when a CD other than the boot CD is in the drive? anna-install is rarely called after base-installer, but it can happen.
Maybe cdrom-retreiver should store a volume ID of the CD and check that ID and handling a media change. -- see shy jo
signature.asc
Description: Digital signature