A policy must prevent unapproved infrastructure from applying across teams. Which HCP Terraform feature is relevant?

1. Changing every workspace's display name
2. Marking an output as sensitive
3. Policy enforcement in the run workflow
4. Running terraform fmt more often