An enrichment service is temporarily unavailable, but the rest of the incident workflow can proceed safely. Which approach best fits?

1. Use a controlled least-privilege automation identity and managed secret handling.
2. Place an appropriate authorization gate before the destructive action.
3. Make the integration operation idempotent using a stable incident identifier.
4. Use bounded retries and an explicit degraded or manual fallback path.