Refunds must be impossible before a customer's identity is verified. Which approach guarantees it?

1. A.A system-prompt rule stating verification is mandatory
2. B.Few-shot examples showing verification happening first
3. C.A programmatic gate that blocks process_refund until get_customer returns a verified ID
4. D.A routing classifier that enables tools per request type