A company wants an enterprise access model based on project attributes across many roles and resources. Which prerequisite is essential for trustworthy ABAC?

1. Govern changes to authorization-relevant principal and resource tags.
2. Allow every developer to change any project authorization tag freely.
3. Remove all IAM policies because tags themselves grant access.
4. Treat resource Name tags as encrypted credentials.