An agent must remember a user's preference across turns but must not mix records between users. Which design is appropriate?

1. Disable identity checks because the model can infer the caller
2. Put all users' secrets into the system prompt
3. Scope conversation or memory state to the authorized user and retention policy
4. Use one shared unrestricted memory object for every user