A text-to-SQL assistant should answer analytics questions but must never modify production data. Which two controls are appropriate? Select 2 answers.

1. Give the model database administrator credentials and rely only on a polite prompt.
2. Allow any generated SQL because the user asked in natural language.
3. Disable query logging to prevent discovering accidental writes.
4. Validate and constrain generated queries, with execution limits and a safe failure path.
5. Use a database identity restricted to the approved read-only data scope.