Which practice makes an OpenAPI description part of an API-first process?

Which practice makes an OpenAPI description part of an API-first process?

1. Generate the description after each production deployment.
2. Review and version it before dependent work, then enforce it against the implementation.
3. Add every database column to the public response schema.