A reusable fragment must be usable by another extension. Which design is appropriate?

1. Assume every private internal variable is automatically public
2. Embed production secrets in the fragment's default inputs
3. Remove all fragment inputs and hardcode one customer's data
4. Enable extension access and expose the required artifacts with a clear contract