An agent should only use approved model versions and tools after evaluation. Which approach best fits?

1. Implement governed retention and deletion across memory and derived artifacts.
2. Maintain a controlled inventory and a reviewed promotion process.
3. Review server trust, authentication, requested permissions, and network exposure.
4. Use distinct appropriate identities and scoped auditability.