A function tool can refund orders. Which control belongs immediately before execution?

1. Execute first, then inspect the model's explanation
2. Grant the model global order-owner permissions
3. Validate arguments and confirm the caller may refund that specific order
4. Trust the order ID because it matches the expected JSON type