An agent endpoint is reachable, but callers are denied. What should be checked before changing the flow logic?

1. Only the number of notebooks in the workspace
2. Deployment authentication, caller identity, and permissions
3. Only a higher SQL row limit
4. Only the model's narrative style