An Adaptive Card submits an amount and account identifier. What must the receiving flow do before executing a transaction?

1. Execute before parsing the amount
2. Trust every submitted value because the card rendered
3. Validate the submitted values and the user's authority independently
4. Let the user supply an arbitrary administrator identity