The AgentForce Inter-Agent Communication and Security Configuration Guide specifies that when sensitive identity data (like a verified customer ID) must be shared between agents, the correct approach is to use the Agent API to initiate the downstream agent’s session. The verified data should be passed as a read-only context variable, ensuring persistence across sessions while preventing modification by the large language model (LLM).

This setup maintains data integrity and security compliance by isolating sensitive variables from the LLM’s reasoning layer. Context variables passed via the Agent API are immutable during runtime, ensuring they cannot be altered or exposed in agent-generated responses.

Option A adds unnecessary data persistence and complexity. Option B is insecure because conversation variables are exposed to the LLM context, risking unintended modification or leakage.

Therefore, the most secure and compliant configuration is Option C – Use the Agent API to pass verified IDs as read-only context variables between agents.