A tool receives an account identifier from a session variable. What should the execution layer do before accessing the account?

1. Validate the value and bind it to the authenticated caller's allowed scope
2. Trust every variable because it came from an agent flow
3. Log the account password in the final response
4. Replace it with a random account ID