Security reviewers want proof that a database operation came through an approved AI integration. Which capability is most relevant?

1. Authenticated tool access with auditable caller and execution records
2. Disabling logs to reduce token usage
3. Comparing only semantic distances between prompts
4. Anonymous access combined with longer tool descriptions