Monitoring triggers a retraining workflow. What must happen before replacing the production model?

1. Delete the independent evaluation dataset
2. Automatically promote every newly trained artifact regardless of results
3. Assume more recent training always means higher quality
4. Validate the candidate against release and safety criteria and use a controlled deployment process