A model emits a function call with schema-valid arguments. What should happen next?

A model emits a function call with schema-valid arguments. What should happen next?

1. The application allowlists the function, validates domain rules and authorization, then executes it and records the result
2. The provider has already executed the function, so the application should assume success
3. The application dynamically imports any function name supplied by the model