A GitOps system continuously compares cluster state with reviewed manifests in Git. What is its key behavior?

1. Reconcile actual state toward versioned desired state
2. Require an operator to recreate every Pod manually
3. Store all production secrets unencrypted in public Git
4. Treat manual production edits as the only authority