A SOAR playbook may retry a ticket-creation step after an ambiguous timeout. Which approach best fits?

1. Use a controlled least-privilege automation identity and managed secret handling.
2. Make the integration operation idempotent using a stable incident identifier.
3. Place an appropriate authorization gate before the destructive action.
4. Use bounded retries and an explicit degraded or manual fallback path.