Which TWO controls strengthen a protected release branch? Select TWO.

1. Allow unrestricted history rewriting to simplify audits.
2. Require relevant automated checks before merge or promotion.
3. Publish all repository signing credentials in source.
4. Require appropriate review before merging production changes.