Private-Preview Agent Boundary

The governed airlock for email-originated agent work.

Stop routing raw webhooks into LLM context windows. ProvnMail separates capability from authority by preserving raw MIME custody, applying deterministic admission gates, and recording redacted evidence before a task is ever created.

DeterministicRigorous policy evaluation before AI exposure.
QuarantineDangerous payloads isolated automatically.
AuditableRedacted evidence trails for key decisions.

Capability vs. Authority

Models can reason about email, but they should not carry authority alone. ProvnMail is the workflow surface where admission, task creation, draft review, export, and handoff are mediated under explicit boundaries.

MIME

Raw MIME Custody

Every inbound message is stored, hashed, and normalized before agent exposure. The pilot preserves source linkage so later task and draft actions can stay bound to the original mail event.

Gate

Deterministic Admission

A2AVanguard-style admission evaluates sender, thread, and payload facts before task creation. Blocked or quarantined messages do not become agent-visible tasks.

Audit

Evidence Records

Allow, block, quarantine, draft, approval, export, and handoff events produce durable local records with hashes, refs, policy context, and redaction boundaries.

Private Preview Status

The control surface is currently a private-preview internal pilot for proving agent-governance boundaries on a concrete email surface before broader external use.

Verified Ingress Path

Cloudflare Email Routing, Railway, PostgreSQL persistence, and protected production smoke checks are in place for the current internal pilot path.

Current Boundaries

No autonomous SMTP send is enabled. VEX is off by default after one rolled-back shadow rehearsal; ProvnCloud evidence submission remains optional/default-off and non-authoritative.