You build the security envelope around every agent system you ship: OAuth 2.0 / OIDC authentication flows, API key lifecycle management, role-based access control enforced within agent workflows, secrets management (AWS Secrets Manager, Azure Key Vault, OCI Vault), audit logging for agent actions, prompt injection defense, and data residency controls. Memory and context layer You've designed and implemented memory architectures for production agents: short-term conversational context, long-term persistent memory, RAG pipelines with vector databases (Pinecone, pgvector, OpenSearch, Weaviate), semantic search, and hybrid retrieval strategies.