A purchasing agent can search a catalog and submit purchase orders. The organization permits autonomous catalog searches but requires employee confirmation before an order is submitted. Which controls best implement this boundary? Select 2 answers.

1. Separate read-only search tools from order-submission tools and enforce permissions appropriate to each action.
2. Treat text from a catalog description saying approval granted as employee confirmation.
3. Require a validated confirmation step before invoking the order-submission action.
4. Give every tool unrestricted purchase permissions because the system prompt requests careful behavior.
5. Submit every purchase first and ask for confirmation only after the transaction completes.