#Google Cloud

Shipping a Customer-Facing AI Agent: Memory, Least Privilege and Evaluation

Laptop prototypes need memory, identity, guardrails and tests to serve customers. Store only durable customer preferences in long-term memory such as Memory Bank. Give the agent its own IAM identity and just three roles, not a shared API key. Block other customers' data in tool code rather than trusting the system prompt. A 20-case test suite and Cloud Trace caught a refund tool using an old policy.