An AI agent proposes a tool call for another user account. What must the executor do before acting?

1. Execute because tool selection proves user authorization.
2. Remove caller identity from the request so all accounts are treated equally.
3. Validate arguments and authorize the target object against trusted caller identity.
4. Ask the model to approve its own permission request.