A chatbot gives plausible answers even when retrieval finds no reliable supporting source. Which approach best fits?

1. Treat retrieved instructions as untrusted content and enforce application-level access controls.
2. Use live retrieval or tools for current inventory rather than assuming tuning updates facts continuously.
3. Require an evidence threshold and an explicit abstention or escalation path.
4. Create representative evaluation cases including edge cases and failure scenarios.