A support agent must answer from private case notes. Which two controls belong before those notes become model context? Select 2 answers.

1. Select and minimize the case-note fields needed for the current task.
2. Use relevance score as the sole authorization decision.
3. Verify the requesting identity and enforce access to the relevant case records.
4. Embed the database administrator credential in every retrieved note.
5. Retrieve all cases and rely only on a prompt saying do not leak.