Gmail
Send mail from your own address — to the recipients you allow, and nothing else.
You connect your Google account once; the credential is send-only and cannot read the mailbox. Your policy names who may be written to, how many messages a day, and whether attachments go.
A message can wait for you. Tick “Send a message” under “Ask me before” in the policy, and the agent’s message is checked against your rules and left in your inbox instead of being sent: you read it whole, with every attachment to open, and it goes out only when you approve it with your wallet — exactly as you read it. If you reject it, your reason goes back to the agent. How asking first works →
The owner’s policy
Stored as GMAIL_POLICY, checked inside the enclave before any request leaves.
Who can it write to?
recipient_domainsOnly these domainsa list- Mail may go to any address at these domains. "any" means anywhere. Combined with the addresses below: a recipient passes if either list allows it. Empty, with no addresses below: anyone.
recipientsOnly these addressesa list- Exact addresses the agent may write to, whatever their domain. One disallowed address refuses the whole message. Empty, with no domains above: anyone.
How much?
max_per_dayMessages a daya number, a day- Counted per agent, in UTC days, and only for mail that actually left — a refused message gives its place back. What an agent sends itself and what you confirm for it are counted apart, each against this number. The platform has a limit of its own beside it. Empty: as many as it likes.
max_recipientsRecipients per messagea number, per message- To and Cc together. Empty: any number.
What else?
max_attachment_kbAttachments up toa number, KB- The total size of one message’s files. This is the one rule that works the other way round: with nothing here, attachments are refused. Empty: no attachments at all.
subject_prefixSubject prefixtext- Put in front of every subject that does not already start with it, so a recipient can tell agent mail from yours. Empty: subjects go as written.
What may it do?
confirmManual approvala set of choices- An operation ticked here is prepared by the agent and waits for you: the message is checked against the rules above, you read it in your inbox, and it is sent by your own call — one transaction from your wallet. You are shown the whole message and given every attachment to open. Nothing ticked: the agent sends within the rules above without asking.
Auto-approve: the agent sends within the limits below. Manual approval: the message is prepared and waits in your inbox; your yes sends it, files included. Attach files unticked: no message carries a file.
Operations
Every call names one in operation; the other fields are the parameters listed under it.
Reading the deployed version…