An application needs an agent to invoke a specialized PL/SQL business operation. What should the author provide?

1. The database password as part of the natural-language tool description
2. A free-form instruction permitting arbitrary SQL on all schemas
3. Only a document describing the function's behavior
4. A custom tool exposing a controlled database function with a clear interface