A deployment stage needs custom verification logic beyond built-in controls. Which supported integration can be evaluated?

1. Editing production binaries manually outside the release record.
2. An invoke-function or shell stage with scoped permissions and explicit success criteria.
3. An untracked command run after users report failures.
4. Giving every application user deployment administration.