A team stores long-lived agent memory derived from user conversations. What two controls are appropriate for privacy and correctness? Select 2 answers.

1. Keep every conversation forever regardless of the stated retention policy.
2. Scope memory to authorized users and apply retention and deletion requirements.
3. Treat remembered content as contextual data and validate it before sensitive decisions or actions.
4. Assume stored memory is always true because it was generated by the model.
5. Combine every user memory into one unrestricted shared record.