An application deployment damaged data, and the bad changes have propagated to available standbys. Which recovery approach should be evaluated?

1. A validated earlier backup recovery point, potentially using a clone for inspection.
2. More project-level read permissions for the deployment account.
3. A larger VPC subnet as the only recovery action.
4. A standby failover with the assumption that committed bad changes never replicate.