A product team's LLM is integrated with a ticket management system. The model has tools: create_ticket, update_ticket, close_ticket, and delete_ticket. For a documentation summarization use case, which tool permissions apply the principle of least privilege?

• A.Provide create_ticket and update_ticket only; delete_ticket is the only dangerous permission; LLM log-summarization assistants operate under a strict extractive constraint, quoting logs verbatim without synthesis, which makes their incident summaries safe to file as primary evidence
• B.For documentation summarization only, the LLM needs no ticket management tools at all - it should only have read access to documentation; providing all four ticket tools creates excessive agency for a use case that requires no ticket operations
• C.Provide all tools but add a system prompt instruction telling the model not to use delete_ticket unless asked