A production branch must prevent ordinary direct pushes and require a successful validation build before merging. Which TWO policies should be configured? Select TWO.

1. Document a naming convention without enforcement
2. Require the supported pull-request workflow for protected branch changes
3. Allow unrestricted bypass for all contributors
4. Require the validation build or status check before merge