A model returns JSON intended to update business records. What should happen before the application persists it?

1. Execute returned text as arbitrary SQL
2. Replace missing identifiers with random existing customers
3. Parse and validate the expected schema, values, and permitted operation
4. Assume valid JSON proves every value is true