An enterprise needs governance over which tools agents can reach and how approved calls are controlled. Which approach best fits?

1. Use appropriate gateway or policy controls and maintain explicit allowlists.
2. Retain least-privilege tool authorization independently of content filtering.
3. Evaluate Model Armor policies alongside application controls.
4. Minimize and protect telemetry, with redaction and approved retention.