A build must reach a private internal dependency that public hosted agents cannot access. Which agent design should the team evaluate?

1. Publish the internal dependency anonymously solely for the build
2. Assume every public hosted agent can reach all private networks automatically
3. Store the dependency's network address in a tag without connectivity
4. A suitably isolated self-hosted agent with required private connectivity