Your research agent works great in a notebook. Then it leaks API keys in a stack trace, forgets what it researched two messages ago, and returns citations that link to pages that do not exist. One made-up citation kills trust for good. This talk fixes all three. Keep credentials out of the agent and hand it short-lived ones that expire. Give it memory that carries across turns so it builds on its own work. And check every citation before the user sees it: the link is real, the page is reachable, and it says what the agent claims. You leave with a way to ship a research agent that does not leak, does not forget, and does not invent its sources.

Outline: • The Research Agent That Became a Liability • Securing Credentials with API Gateways • Persistent Conversation Context • Source Verification That Actually Works • The Complete Research Agent and Resources