Most agent demos connect to a CRM and update a record. Impressive in a presentation. Broken the moment a second user shows up.
The hard part is not the tool call. It is acting as the right person, remembering only their context, and making sure nothing leaks across users. This is the part that gets hand-waved in demos because it is genuinely annoying to get right.
We ran into this building a reference implementation for the Scalekit x Actian x Render Agents in Production Hackathon in San Francisco on June 27. Here is what we learned.
The problem with agent memory in multi-user systems
When you build an agent that acts on behalf of a user, there are two separate scoping problems:
