A computer-use agent can submit a consequential transaction through a user interface. What should the workflow require?

1. Treat a screenshot as unrestricted permission
2. Confirmation and authorization tied to the actual transaction before submission
3. Share one administrator password with every conversation
4. Execute any visible button without checking its meaning