A tool performs an irreversible operation and must not run simply because generated text resembles a request. Which approach best fits?

1. Use governed long-term memory such as a suitable Memory Bank integration.
2. Use Agent Development Kit.
3. Use a correctly scoped session state store.
4. Require validated structured tool arguments and explicit application authorization.