Cadence docs
runbookrunbooksv4redacted view

Email Lane umail UR-Mail Mailu Wipe-Readiness 2026-07-03

Historical email lane receipt. Preserve DONE. GO checklist 2026-07-11: NO-GO / not safe-auto.

Updated 2026-07-11·Freshness: Reference·Sensitive tokens or credentials were hidden before display.

Email Lane umail UR-Mail Mailu Wipe-Readiness 2026-07-03

Historical email lane receipt. Preserve DONE. GO checklist 2026-07-11: NO-GO / not safe-auto.

Body

Email Lane — umail / UR-Mail / Mailu (2026-07-03)

Products: umail, mail (one email lane; naming sprawl) Runtime authority: Mailu on VPS host mail.united-ai.ca Status: full off-host preserve DONE; wipe gate still NOT MET pending owner AI mail access model decision

Runtime posture (read-only; no start/stop this pass)

  • Mailu compose project mailu is STOPPED (docker compose ps empty)
  • No listeners on ports 25, 465, 587, 993, 143
  • Beacon owns public HTTP(S) on this host
  • MX for united-ai.ca still points at mail.united-ai.ca (inbound not accepted while stopped)
  • SPF/DMARC unchanged (document only; not mutated)

Preserve (Mac off-host)

Full /mailu data and /root/mail config archived to Mac under:

UAI-preserved-artifacts / wipe-readiness packet dated 2026-07-03 / umail /

Files:

  • mailu-data- + UTC stamp + .tar.gz (~44.7 MiB compressed; 1873 members; source ~176M on host)
  • mailu-config- + UTC stamp + .tar.gz (compose, mailu.env, renew-certs.sh)
  • matching .sha256 sidecars and manifest

Exact joined paths and full digests live in the workspace receipt and Mac sidecars (not repeated unbroken here).

Archive method: ssh stream tar -cz read-only; containers not started. Postfix queue sockets ignored by tar (expected).

On-disk mailboxes preserved (localparts only)

cadence@, midnight@, noreply@, scott@, scribe@, skip@, sunshine@, weekendwow@ (united-ai.ca)

Admin DB had 3 users; 8 maildirs on disk (orphan drift noted in discovery receipt).

Config authority

/root/mail/ (no git): docker-compose.yml, mailu.env (secrets inside archive only), renew-certs.sh

AI hooks (Cadence)

Cadence client expects umail/UR-Mail HTTP API:

  • Login: POST {base}/api/auth/login
  • Send: POST {base}/api/accounts/{account_id}/send
  • Env surfaces: CADENCE_UMAIL_ / SCRIBE_UMAIL_ (and SMTP fallback CADENCE_SMTP_*)
  • Tool id: email . umail . approved_send

No live agent send/receive exercised this pass. First-party umail app source not located.

Owner decisions still open

  1. AI mail access model: restore Mailu vs rebuild vs new agent gateway; agent send path
  2. Live posture later: restore stack vs MX cutover (not executed; no DNS/TLS/firewall changes)

Preserve of full /mailu + config to Mac is executed.

Safety

  • No mail service start/stop
  • No DNS/TLS/firewall/route changes
  • No secrets printed in this document
  • No mail message bodies read or published

Workspace handoff notes packet for clean-slate 2026-07-01: discovery receipt, ZAI email archive receipt, and owner decisions session note (dated 2026-07-03).

Canonical Redesign (2026-07-03)

This lane receipt remains historical evidence. Canonical UAI Mail docs:

  • Product: uai-doc-ecosystem-product-uai-mail
  • Architecture: uai-doc-runbooks-uai-mail-arch
  • Current state: uai-doc-runbooks-uai-mail-state
  • Preserve/restore: uai-doc-runbooks-uai-mail-restore
  • AI access model (draft, OPEN): uai-doc-plans-uai-mail-ai-access
  • Operator boundaries: uai-doc-runbooks-uai-mail-boundaries

Primary name is UAI Mail. umail / UR-Mail / urmail / Mailu are LEGACY aliases or runtime labels.

  • [REDACTED:high-entropy] — Owner GO checklist 2026-07-11 (NO-GO / not safe-auto)