A team enables tracing for agents that process confidential records. Which TWO practices are appropriate? Select TWO.

1. Apply suitable access and retention controls to trace data
2. Publish every prompt and tool output to a public dashboard
3. Minimize or redact sensitive fields where the tracing configuration supports it
4. Assume diagnostic data is never sensitive