A response playbook performs a destructive containment step with high business impact. Which approach best fits?

1. Place an appropriate authorization gate before the destructive action.
2. Use bounded retries and an explicit degraded or manual fallback path.
3. Make the integration operation idempotent using a stable incident identifier.
4. Use a controlled least-privilege automation identity and managed secret handling.