A team wants to expose a new feature only to a small user cohort without deploying a different binary for each cohort. Which approach best fits?

1. Use a blue-green deployment with controlled traffic switching.
2. Use an expand-and-contract migration with backward-compatible intermediate states.
3. Validate migration recovery and compatibility before approving the production rollout.
4. Use an appropriately controlled feature flag.