A grounded-answer check flags a response as supported by its retrieved passage, but that passage belongs to another tenant. What is the correct assessment?

1. Increase the grounding threshold as the only tenant isolation control.
2. Remove citations so the tenant mismatch is no longer visible.
3. A grounded result makes cross-tenant disclosure acceptable.
4. Grounding does not prove authorization; fix retrieval access control before the passage reaches the model.