A multi-user agent caches retrieved documents without including user access context in the cache key. Which approach best fits?

1. Apply permission-aware retrieval before prompt construction.
2. Partition or authorize cache use according to the requesting user's permissions.
3. Propagate deletion through indexing, caches, and retained derived data.
4. Use an authorized live tool call for the authoritative inventory state.