A Bedrock agent must propose refunds but the application must authorize and execute them through an existing transaction service. The team wants to inspect the selected action before fulfillment. Which integration is most appropriate?

1. Give the model direct database administrator credentials and accept every proposed action.
2. Configure return of control and validate the returned action and arguments in the application before execution.
3. Let a retrieved document decide which user owns the refund account.
4. Encode the refund request in the final answer and assume that executes it.