A hosted agent uses memory to continue tasks across interactions. Which design is appropriate for a multi-user application?

1. Treat a model-generated username as verified identity
2. Allow retrieved documents to select any customer's session
3. Isolate session and user memory according to the application's identity boundaries
4. Use one unrestricted memory object for all users