Rag | Thomas Talks AI: Claude Architecture, AI Agent Security, Claude Code & Production Engineering

An AI agent memory record passing through provenance, scope, expiry, review, and deletion checks before reuse

AI agent memory needs provenance and an expiry date

Persistent memory can make an AI agent faster, but stale facts, copied instructions, and missing ownership can quietly steer later runs. Store provenance, scope, review dates, and deletion rules with every memory.

A diagram showing an AI agent connecting through an MCP server to business systems, with scope, credentials, approvals, logs, and stop rules as controls

Your MCP server is part of the security boundary

MCP servers are not harmless connectors once agents use them to reach tickets, data, APIs, deployment tools, or RAG systems. Treat them as part of the security boundary.