The governed airlock for email-originated agent work.
Stop routing raw webhooks into LLM context windows. ProvnMail separates capability from authority by preserving raw MIME custody, applying deterministic admission gates, and recording redacted evidence before a task is ever created.
Capability vs. Authority
Models can reason about email, but they should not carry authority alone. ProvnMail is the workflow surface where admission, task creation, draft review, export, and handoff are mediated under explicit boundaries.
Raw MIME Custody
Every inbound message is stored, hashed, and normalized before agent exposure. The pilot preserves source linkage so later task and draft actions can stay bound to the original mail event.
Deterministic Admission
A2AVanguard-style admission evaluates sender, thread, and payload facts before task creation. Blocked or quarantined messages do not become agent-visible tasks.
Evidence Records
Allow, block, quarantine, draft, approval, export, and handoff events produce durable local records with hashes, refs, policy context, and redaction boundaries.
Private Preview Status
The control surface is currently a private-preview internal pilot for proving agent-governance boundaries on a concrete email surface before broader external use.
Verified Ingress Path
Cloudflare Email Routing, Railway, PostgreSQL persistence, and protected production smoke checks are in place for the current internal pilot path.
Current Boundaries
No autonomous SMTP send is enabled. VEX is off by default after one rolled-back shadow rehearsal; ProvnCloud evidence submission remains optional/default-off and non-authoritative.