The product features that let you pause recall, pause new capture, inspect retained records, correct one, and clear a defined scope. These are separate operations — “do not remember this conversation” should not require the model to remember and obey that instruction indefinitely.
Asking the model what it remembers is not a complete audit of the application’s storage. Implement the choice before request construction: if recall is paused, those records are not loaded; if writing is paused, writes are rejected at the storage boundary.