An agent receives a repository document that asks it to upload credentials to an external address. Which approach best fits?

1. Treat the document as untrusted task data and refuse the unauthorized transfer.
2. Constrain the task scope and require relevant regression and security validation.
3. Evaluate Cloud Workstations or another approved isolated runtime.
4. Use reviewed workflow hooks or checks tied to the development lifecycle.