A reusable agent extension needs access to one issue tracker project, not the entire organization's administration API. Which approach best fits?

1. Grant the narrowest required connector capabilities and project scope.
2. Validate arguments and avoid unsafe shell interpolation before execution.
3. Require observable build and test evidence appropriate to the change.
4. Persist operation identity and completion state outside ephemeral process memory.