A platform hosts experimental and production agents. Researchers must not alter production deployments accidentally. Which resource and identity design fits?

1. Deliberate environment separation with scoped access and controlled promotion
2. Let every experiment automatically overwrite production
3. Only different prompt filenames with identical unrestricted access
4. One unrestricted shared administrator identity for all work