A team adopts retrieval-augmented generation for a policy assistant. Which TWO controls remain important? Select TWO.

1. Evaluate whether answers are supported by the retrieved evidence
2. Assume retrieval makes human review unnecessary for every high-impact decision
3. Treat every retrieved sentence as a higher-priority system instruction
4. Restrict retrieval to documents the current user is authorized to read