Research agents are deceptively easy to prototype and dangerously hard to productionize. The demo searches the web, summarizes findings, and cites sources. The production version leaks credentials, forgets what it researched two turns ago, and returns citations that lead nowhere.

In this session I build a production-ready research agent from scratch: API gateway security, identity-based credentials, context that persists across turns, and source verification that ensures every citation is real.

Outline:
• The Research Agent That Became a Liability
• Securing Credentials with API Gateways
• Persistent Conversation Context
• Source Verification That Actually Works
• The Complete Research Agent and Resources