An application requires each purchase order to reference an existing customer, regardless of whether updates come from APEX or another client. Where should this integrity rule primarily reside?

1. Only in the customer's display label
2. Only in a client-side dynamic action
3. Only in the report's WHERE clause
4. In a database foreign-key constraint