A long-term agent memory stores personal information beyond the approved retention period. Which approach best fits?

1. Implement governed retention and deletion across memory and derived artifacts.
2. Review server trust, authentication, requested permissions, and network exposure.
3. Use distinct appropriate identities and scoped auditability.
4. Maintain a controlled inventory and a reviewed promotion process.