Consent and data boundaries

The agent reads, remembers, and forwards context the user never agreed to share.

State what will be read, retained, and sent onward before the first call. Default to session memory. Make retention a visible control.