Agent frameworks now persist every turn for you. The convenience leaves five gaps: no deletion, no owner, no retention, no encryption, and a session ID that behaves like a credential. A 20-minute audit script that finds all five, with the orphaned-events check that catches a delete that lies.
Your agent's session store is a database nobody designed. Audit the five gaps.
