A test set contains only cooperative users and correct tool responses. Which additions best improve coverage?

1. Ambiguous requests, adversarial content, permission boundaries, and dependency failures
2. More copies of the same successful example
3. Only aesthetic agent profile tests
4. No tool tests because the tool schemas exist