A support agent's system prompt contains the four rules below. Which two should be enforced programmatically rather than left to prompt guidance? Select two.

Answer: A and C — Verify the customer's identity with get_customer before calling process_refund / Never issue a refund above the agent's approval limit without escalation

Rules that protect identity and money require deterministic compliance, which only programmatic enforcement (prerequisite gates, interception hooks) provides; prompt instructions have a non-zero failure rate. Tone (b) and the order in which to offer acceptable options (d) are preferences where occasional deviation is tolerable, so prompt guidance is appropriate.