A team performs adversarial security tests of an agent with real production mutation tools. What should the test design do?

1. Grant the test unrestricted production power by default
2. Use authorized controlled environments, constrained tools, and safeguards against real unintended effects
3. Skip all safety testing to avoid setup
4. Treat a test label as proof no side effects can occur