A risk estimate depends heavily on a supplier's unverified claim about capacity. What should the manager do?

1. Report the estimate as exact because a spreadsheet calculated it
2. Add hidden padding without noting the assumption
3. Validate the assumption and communicate the effect of uncertainty on the forecast
4. Remove the supplier from the risk model