A service has recovered, but customers cannot complete transactions because a dependent identity service remains down. What does this demonstrate?

1. Recovery validation must include end-to-end business dependencies
2. The transaction failures prove every backup is corrupt
3. Recovery objectives apply only to hardware
4. The incident can be closed based solely on the first component