An assistant is evaluated only on a handful of friendly demonstrations selected by its author. Which approach best fits?

1. Require an evidence threshold and an explicit abstention or escalation path.
2. Use live retrieval or tools for current inventory rather than assuming tuning updates facts continuously.
3. Create representative evaluation cases including edge cases and failure scenarios.
4. Treat retrieved instructions as untrusted content and enforce application-level access controls.