A company discovers harmful output after release. What should its operating governance provide?

1. A rule that user feedback is always ignored unless it improves average accuracy.
2. An incident and feedback process with accountable triage, containment, communication, and corrective action.
3. Automatic deletion of all complaint evidence.
4. Only a statement that the model was approved once.