An agent may modify customer accounts. Security wants to limit consequences of an incorrect model decision. Which control is most appropriate?

1. Give every tool unrestricted administrator credentials
2. Trust every generated tool call because it matches a schema
3. Narrow tool permissions, argument validation, and approval for high-impact actions
4. Put an administrator password in retrieved documents