A candidate release passes prompt-only tests but changes tool contracts and authorization middleware. Which further validation is needed?

1. Remove failing integration cases before promotion
2. Assume unchanged agent names prove compatibility
3. Only a spelling check on the release notes
4. Unit, integration, regression, authorization, and end-to-end evaluation appropriate to the changes