An assistant receives retrieved text instructing it to reveal confidential information. Which two controls help reduce the risk? Select 2 answers.

1. Hide credentials inside a longer system prompt.
2. Enforce data access permissions in the retrieval and tool layers.
3. Treat retrieved content as untrusted data rather than privileged instructions.
4. Trust any document that uses the word administrator.
5. Give every user unrestricted access to all internal documents.