A product team's LLM is integrated with a ticket management system. The model has tools: create_ticket, update_ticket, close_ticket, and delete_ticket. For a documentation summarization use case, which tool permissions apply the principle of least privilege?

• A.For documentation summarization only, the LLM needs no ticket management tools at all - it should only have read access to documentation; providing all four ticket tools creates excessive agency for a use case that requires no ticket operations
• B.All four tools should be provided since the LLM may need to create tickets to document summaries
• C.Provide create_ticket and update_ticket only; delete_ticket is the only dangerous permission
• D.Provide all tools but add a system prompt instruction telling the model not to use delete_ticket unless asked