A finance agent can issue refunds. Which requirement is most important before enabling this tool for customer-facing use?

1. Validate authorization and apply approval rules appropriate to refund impact
2. Give every customer the same administrator token
3. Assume a well-written tool description authorizes every refund
4. Disable audit records so refunds appear faster