Agent frameworks are learning to delete a session, but a delete never reaches your backups and nobody is doing retention. How I made both work on Postgres with one Cloud KMS key per tenant, what happens if someone steals the key, and what it costs.
Crypto-shredding Agent Sessions: Deleting What Your Backups Remember