A team enables natural-language database querying. Which control remains necessary when generated SQL accesses business tables?

1. Enforce the caller's applicable database and application access rules
2. Assume a fluent explanation proves the generated SQL is safe
3. Disable auditing because the request began as natural language
4. Give the model unconditional access to every table