Copilot proposes a function for a private repository. Which actions remain the author's responsibility? Select 2 answers.

1. Review and test behavior against the actual requirements
2. Assume generated code cannot expose sensitive data
3. Verify compliance with applicable security and repository policies
4. Treat the suggestion as an approved peer review