An agent integrates with a Fabric data agent. Which boundary must remain enforced?

1. A similarity score proves the user may read the data
2. A public connection string as the only governance control
3. Every question grants universal data access
4. The caller's authorized data scope and the supported delegated task contract