What runs today
Envolt Mail is in development. This page is generated from the same status file as every badge on this site, so the two can't disagree.
- Live
- Public and running in production.
- Running in staging
- Built and running on our staging environment, on synthetic test mail only.
- Designed
- Specified in detail, not built or not switched on yet.
Capabilities
Public
- This websiteLive
envoltmail.com, with a strict content security policy, no cookies and no analytics.
- Authenticated, signed domainsLive
Our own domains publish Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and Domain-based Message Authentication, Reporting and Conformance (DMARC) records and are signed with Domain Name System Security Extensions (DNSSEC).
Inbound
- Airlock quarantineRunning in staging
Parses each message in isolation, converts HTML to plain text, removes and counts hidden content and invisible characters (including Unicode tag characters), and inspects attachments.
- Rules-first triageRunning in staging
Duplicates, bulk mail and notifications are recognized by rules before any model runs.
- Agent Seal verificationRunning in staging
Incoming mail that carries an Agent Seal header is checked against the sender's published keys.
- Quarantined readerRunning in staging
A reader with no tools turns each message into a structured case. It redacts card, bank account and US Social Security numbers first, can only raise attention, and fails closed to a person. It runs on a no-cost synthetic stand-in; no real model is switched on.
Storage
- Per-message encryptionRunning in staging
Raw mail and attachments are encrypted with a key per message, wrapped under a per-customer key, with versioned keys.
Record
- Tamper-evident ledgerRunning in staging
Every event is hash-chained and anchored daily. Conversation threads are re-verified before each anchor, and a broken chain is sealed and recorded, never anchored.
- Isolation canariesRunning in staging
Every staging check plants unique markers in separate synthetic test customers and confirms neither can see the other's.
Mailboxes
- Mailbox connectionsDesigned
Read-only connections beside your existing mail, never in its delivery path. A read-only connector is built and tested but not connected to any mailbox.
Agents
- Agent draftingDesigned
Agents read a conversation and propose a plan: a reply, an action, or a question for a person.
- Seal policyDesigned
A policy engine that checks every plan's recipients, content, rate and approval needs against rules your team owns.
People
- Approval queueDesigned
One card per decision: the ask, a recommendation, alternatives, the risk, and one-tap approve, edit or hold.
- Earned autonomyDesigned
An agent can earn routine sends from its measured track record, and loses them automatically on any serious mistake.
- Kill switchDesigned
Halts every agent, one persona or a single agent instantly.
- Accounts and sign-inDesigned
Invited accounts with passkeys. There are no accounts yet.
Outbound
- Labeled, sealed sendingDesigned
Each approved message gets a single-use capability and goes out with the AI agent label, a signed Agent Seal header and a plain-language disclosure.
- Public receiptsDesigned
A verify link that shows who the agent is, who it works for and whether a person approved, never the message content.
Builders
- API, webhooks and MCPDesigned
A REST API, signed webhooks and a Model Context Protocol (MCP) server for agents. Specified, not built.
Latest release evidence
Every release runs through a gated lane and leaves a receipt. These are the most recent ones.
Service release slice-14.0
October 2, 2026 · commit 7b75d6968172
- ✓ Full test suite
- ✓ Security gate tests
- ✓ Bundle leak scan
- ✓ Domain settings match the recorded posture
- ✓ Database migration tests
- ✓ Staging smoke checks, including live attack samples
- ✓ Production health verified
Website release
October 2, 2026 · commit a274d4c8c636
- ✓ Site build
- ✓ Site leak scan
- ✓ Site tests
- ✓ Staging, then production, verified page by page
- ✓ Home page Largest Contentful Paint (LCP) 1,736 ms against a 1,800 ms target; other pages 1,688 ms or less. Layout shift 0. Measured on emulated slow 4G.
What comes next
The planned order, without dates. It may change, and this page will change with it.
Now
- The inbound pipeline in staging: Airlock, reader, ledger and integrity checks
- This website, built in the open
Next
- The Seal policy engine and agent drafting
- A first read-only mailbox connection in shadow mode
- An approval console for the accountable human
Later
- Labeled, sealed sending with single-use capabilities
- Public receipts and earned autonomy
- Early access for outside teams
History: the changelog (also as an Atom feed). Agents: this page is at /status.md.