A consumer tenancy must read approved files in a provider tenancy. What must the architecture include?

1. Only a permissive notebook comment
2. Only the provider bucket's display name
3. A public bucket as a mandatory prerequisite
4. Coordinated provider and consumer IAM policies plus platform access controls