A production Bedrock Flow must be updated without silently changing every caller to an untested draft. Which deployment approach is appropriate?

1. Use the draft as an untracked mutable production contract.
2. Remove failure handling because a flow version can never fail.
3. Create and test a flow version and deliberately update the deployment alias or caller configuration.
4. Rename the flow but leave every dependency unvalidated.