An organization permits some configured models but prohibits a specific model for a sensitive workflow. What is the most appropriate control?

1. Rename the prohibited model in a prompt description
2. Restrict model availability through the supported model access configuration and validate the workflow's selected model
3. Add a sentence to customer notes asking the model not to use itself
4. Delete all CRM records used by the workflow