A service agent should answer approved product questions but escalate sensitive account changes to a human. Which configuration principle best fits?

1. Disable customer identity checks for all sensitive requests
2. Limit its allowed actions and instructions to the approved scope and define escalation
3. Expose every administrative action and rely only on a friendly tone
4. Tell the agent to invent account changes when data is unavailable