An AI application can browse external URLs returned in model output. Security wants to prevent arbitrary internal-network access and data exfiltration. Which control is most important?

1. Check only whether the URL text contains the company name.
2. Allow every URL if the model says it is needed.
3. Put the network firewall password in the system prompt.
4. Enforce an approved destination and protocol policy in the executor and network layer.