An agent logs full prompts containing secrets and confidential records to a broadly accessible destination. Which approach best fits?

1. Minimize and protect telemetry, with redaction and approved retention.
2. Evaluate Model Armor policies alongside application controls.
3. Use appropriate gateway or policy controls and maintain explicit allowlists.
4. Retain least-privilege tool authorization independently of content filtering.