AI memory feels like the next big security layer. We used to worry about bad inputs in a single request, now one bad write can follow the agent for weeks. Provenance and expiry should become normal.