Infrastructure changes require production authorization separate from development. Which boundary is most effective?

1. Separate production deployment identities and scoped permissions with an approval gate.
2. A different dashboard background color.
3. A comment in the source asking developers to be careful.
4. A production label on the same unrestricted shared API key.