An AI agent can execute a tool that changes business data. What should the application team do before enabling that tool for users?

1. Define scoped permissions, validation, and approval requirements appropriate to the action
2. Assume generated tool arguments can always be trusted
3. Allow the agent to select any administrator identity it prefers
4. Disable all records of tool execution to simplify the workflow