A security review finds raw prompts and responses containing personal information in widely readable logs. Which remediation preserves necessary observability?

1. Remove every metric and disable all failure detection permanently.
2. Minimize or redact sensitive payloads and restrict access and retention for diagnostic data.
3. Keep unrestricted logs indefinitely because monitoring is always exempt from privacy controls.
4. Publish the logs so users can independently search for their own data.