A custom tool expects a numeric account identifier, but the model proposes a free-form sentence. What should the tool layer do?

1. Execute the sentence as arbitrary server-side code
2. Disable type checking for every later call
3. Give the caller administrator privileges to make the sentence acceptable
4. Validate the arguments against the tool's expected schema before executing