Diagnostic logging currently records prompts containing sensitive customer data and raw credentials. What should the team change?

1. Minimize and protect logged data, redact secrets, and retain only justified diagnostic evidence
2. Disable every useful signal without considering alternatives
3. Publish all logs publicly to simplify debugging
4. Assume encryption at rest makes unlimited secret logging harmless