An AI system has no documented way to disable an unsafe action-taking feature quickly. What should operating readiness include?

1. A promise that the model can never make an unsafe action.
2. Only a public apology template.
3. Removal of all audit records during the incident.
4. A tested containment or rollback procedure with authorized responders and escalation.