A coding agent should format and test changes consistently before they are accepted. Which approach best fits?

1. Constrain the task scope and require relevant regression and security validation.
2. Treat the document as untrusted task data and refuse the unauthorized transfer.
3. Use reviewed workflow hooks or checks tied to the development lifecycle.
4. Evaluate Cloud Workstations or another approved isolated runtime.