An agent stores durable conversation state for many customers. Which key design and access control are essential?

1. Assume the model can infer authorization from the message text
2. Scope records to the correct tenant and user, and enforce authorization before retrieval
3. Put every customer's conversation in one globally readable item
4. Use one unrestricted administrator credential in every prompt