An assistant should retain approved useful information across separate sessions with explicit privacy and retention controls. Which approach best fits?

1. Use a correctly scoped session state store.
2. Require validated structured tool arguments and explicit application authorization.
3. Use governed long-term memory such as a suitable Memory Bank integration.
4. Use Agent Development Kit.