A policy assistant uses vector search to retrieve evidence for a generated answer. Which TWO practices are appropriate? Select TWO.

1. Include relevant retrieved evidence in the generation context
2. Filter retrieval to content the user may access
3. Assume similarity scores prove that every generated statement is true
4. Give retrieved documents authority to override all application instructions