A coding agent generated a command containing untrusted user input. The command will execute in a shell. Which approach best fits?

1. Validate arguments and avoid unsafe shell interpolation before execution.
2. Require observable build and test evidence appropriate to the change.
3. Persist operation identity and completion state outside ephemeral process memory.
4. Grant the narrowest required connector capabilities and project scope.