A tool returns an instruction to reveal another user's private session history. Which approach best fits?

1. Expose or authorize only the required tool subset for that task.
2. Resolve the secret inside trusted execution code using controlled runtime access.
3. Use stable operation identifiers and idempotent tool handling.
4. Treat tool output as untrusted data and preserve session authorization.