UAI Mail AI Access Model (Chosen: rebuild agent surface)
Owner chose B: rebuild agent surface. Phase 2 host is VPS loopback only. No Mac Docker. Live Mailu stopped. No raw creds to models.
Body
UAI Mail — AI Access Model
Status: chosen = rebuild agent surface (owner option B). Choice closed. Phase 0 implementation started (plan expansion + private sandbox sketch). Live Mailu stays stopped. No raw creds to models. No DNS/MX/TLS/firewall changes.
Decision key: uai_mail_ai_access = rebuild_agent_surface
Recorded: 2026-07-03. Local receipts (workspace notes/): owner-uai-mail-rebuild-agent-first- 20260703; uai-mail-rebuild-phase0- 20260703.
Meaning
- Build a cleaner mail surface designed for agents (send/receive via approved paths).
- Restore mailboxes from Mac archives into that surface later.
- Do not simply revive Mailu as the long-term AI path.
- Mailu archives remain the preserve source only (LEGACY runtime stack; optional sandbox substrate).
- Live Mailu stays stopped until explicit rebuild work is scoped and owner-approved.
Guiding principles
- Agents send/receive through a controlled boundary. No model receives mailu env files, SMTP passwords, API tokens, or Cadence/Scribe mail env values.
- Approved-send only. Mediated by approved tool path (LEGACY email.umail.approved_send; target uai_mail.approved_send / uai_mail.approved_receive).
- Auditable by default.
- Reversible from Mac archives — see uai-doc-runbooks-uai-mail- restore.
Implementation progress
| Step | Status |
|---|---|
| Owner choice B | DONE |
| Phase 0 executable plan + private sandbox sketch | DONE (loopback-only compose; containers not started) |
| Phase 1 agent API contract | design artifact in sandbox docs/agent-api-contract.md |
| Phase 2+ | pending; owner-gated where live |
Sandbox sketch path segments: UAI-preserved-artifacts / wipe-readiness-2026-07-03 / umail / sandbox-agent-first / Runbook: uai-doc-plans-uai-mail-agent-first- rebuild
Agent path (target)
- Operator or secrets store holds mail credentials — never models.
- Cadence (or successor broker) exposes only approved mail tools.
- Models call tools with message metadata only — never credentials.
- Capability-map gains a UAI Mail card before agents claim live access (Phase 5).
Non-goals
- Do not treat Mailu revive as the long-term AI path.
- Do not invent a first-party umail app repo.
- Do not start production containers or change MX/DNS/TLS/firewall/routes without owner approval.
- Do not publish mailbox bodies or secrets into Explorer.
Related docs
- Product: uai-doc-ecosystem-product-uai- mail
- Architecture: uai-doc-runbooks-uai-mail- arch
- State: uai-doc-runbooks-uai-mail- state
- Restore: uai-doc-runbooks-uai-mail- restore
- Boundaries: uai-doc-runbooks-uai-mail- boundaries
- Rebuild plan: uai-doc-plans-uai-mail-agent-first- rebuild