An AI system is being retired. Which lifecycle responsibility should remain explicit?

1. Leave all production credentials active indefinitely.
2. Delete all required audit evidence without consulting retention requirements.
3. Assume deleting the webpage removes every stored prompt and derived index.
4. Revoke integrations and access and handle retained data, indexes, and artifacts under the approved lifecycle.