UAI Mail docs
planuai-explorerv5redacted view

UAI Mail AI Access Model (Chosen: rebuild agent surface)

Owner chose B: rebuild agent surface. Phase 2 host is VPS loopback only. No Mac Docker. Live Mailu stopped. No raw creds to models.

Updated 2026-07-04·Freshness: Reference·No secret-like patterns were observed in this view.

UAI Mail AI Access Model (Chosen: rebuild agent surface)

Owner chose B: rebuild agent surface. Phase 2 host is VPS loopback only. No Mac Docker. Live Mailu stopped. No raw creds to models.

Body

UAI Mail — AI Access Model

Status: chosen = rebuild agent surface (owner option B). Choice closed. Phase 0 implementation started (plan expansion + private sandbox sketch). Live Mailu stays stopped. No raw creds to models. No DNS/MX/TLS/firewall changes.

Decision key: uai_mail_ai_access = rebuild_agent_surface

Recorded: 2026-07-03. Local receipts (workspace notes/): owner-uai-mail-rebuild-agent-first- 20260703; uai-mail-rebuild-phase0- 20260703.

Meaning

  • Build a cleaner mail surface designed for agents (send/receive via approved paths).
  • Restore mailboxes from Mac archives into that surface later.
  • Do not simply revive Mailu as the long-term AI path.
  • Mailu archives remain the preserve source only (LEGACY runtime stack; optional sandbox substrate).
  • Live Mailu stays stopped until explicit rebuild work is scoped and owner-approved.

Guiding principles

  1. Agents send/receive through a controlled boundary. No model receives mailu env files, SMTP passwords, API tokens, or Cadence/Scribe mail env values.
  2. Approved-send only. Mediated by approved tool path (LEGACY email.umail.approved_send; target uai_mail.approved_send / uai_mail.approved_receive).
  3. Auditable by default.
  4. Reversible from Mac archives — see uai-doc-runbooks-uai-mail- restore.

Implementation progress

Step Status
Owner choice B DONE
Phase 0 executable plan + private sandbox sketch DONE (loopback-only compose; containers not started)
Phase 1 agent API contract design artifact in sandbox docs/agent-api-contract.md
Phase 2+ pending; owner-gated where live

Sandbox sketch path segments: UAI-preserved-artifacts / wipe-readiness-2026-07-03 / umail / sandbox-agent-first / Runbook: uai-doc-plans-uai-mail-agent-first- rebuild

Agent path (target)

  1. Operator or secrets store holds mail credentials — never models.
  2. Cadence (or successor broker) exposes only approved mail tools.
  3. Models call tools with message metadata only — never credentials.
  4. Capability-map gains a UAI Mail card before agents claim live access (Phase 5).

Non-goals

  • Do not treat Mailu revive as the long-term AI path.
  • Do not invent a first-party umail app repo.
  • Do not start production containers or change MX/DNS/TLS/firewall/routes without owner approval.
  • Do not publish mailbox bodies or secrets into Explorer.
  • Product: uai-doc-ecosystem-product-uai- mail
  • Architecture: uai-doc-runbooks-uai-mail- arch
  • State: uai-doc-runbooks-uai-mail- state
  • Restore: uai-doc-runbooks-uai-mail- restore
  • Boundaries: uai-doc-runbooks-uai-mail- boundaries
  • Rebuild plan: uai-doc-plans-uai-mail-agent-first- rebuild