A business rule forbids refunds above a threshold without approval. Where should that rule be enforced?

1. In the model's sampling temperature
2. In the authorized execution workflow or backend as well as guiding instructions
3. Only in a hidden filename
4. Only in a friendly greeting