A medical-information assistant encounters a request beyond its validated scope. Which response policy best supports responsible operation?

1. Claim that every generated answer is professionally certified.
2. Invent a confident answer to avoid admitting uncertainty.
3. Suppress all records of out-of-scope requests.
4. Explain its limitation and direct the user to an appropriate qualified source.