A coding agent may propose a production deployment, but the workflow requires human authorization for publishing. Which approach best fits?

1. Run it in an appropriately isolated development sandbox.
2. Add an enforced approval boundary before deployment actions.
3. Configure an authorized MCP server with narrowly scoped capabilities.
4. Package the procedure as a reviewed skill or reusable instruction artifact.