A prompt-only update changes tool use unexpectedly. Which release practice is most appropriate?

1. Skip review because no Python code changed
2. Version the agent configuration and rerun behavioral and access-boundary evaluations
3. Judge the update solely by its first greeting
4. Automatically grant broader privileges if tests fail