A predictable invoice process always performs the same three approved operations. The team proposes an unconstrained autonomous loop. Which alternative should be considered first?

1. Allow arbitrary tool creation by the model
2. A bounded deterministic workflow with model use only where interpretation is needed
3. Remove all validation because the steps are repetitive
4. Give the agent unrestricted production privileges