An agent's evaluation dataset omits prompt injection and unavailable-tool scenarios. Which approach best fits?

1. Evaluate retrieval relevance and answer support as separate stages.
2. Validate task outcome and identifier correctness, not only HTTP success.
3. Evaluate all required acceptance criteria before promotion.
4. Add adversarial and dependency-failure cases to the test set.