An automated alarm response can restart workers. Which safeguards are essential?

1. A tenancy administrator key inside each notification.
2. Scoped identity, validated conditions, idempotency, bounded retries, and recorded outcomes.
3. Treat every absent datapoint as permission to delete the service.
4. Unlimited restarts with no cooldown or history.