A tool-enabled model emits arguments for a customer lookup. The request contains a customer ID different from the authenticated user. What should the tool executor do?

1. Validate the schema and authorize the requested customer against trusted caller context before running the tool.
2. Remove authentication from the lookup API to avoid mismatches.
3. Ask the model whether the caller is authorized and treat its answer as the only check.
4. Execute because tool arguments produced by the model are always authorized.