An agent can issue refunds through a tool. Which two controls should a beginner include before allowing consequential refund actions? Select TWO.

1. Give the agent unrestricted tenant administrator access
2. Treat retrieved customer text as higher authority than system rules
3. Validate tool arguments and business authorization
4. Require approval where the business risk warrants it