Skip to content

Provide a restricted sender for automated business email #5529

Closed as not planned
Closed as not planned

Description

@devantler

🤖 Generated by the Agentic Engineer

Summary

Provide the configured dedicated sender for business automation.

Motivation

The business site needs to send password resets, announcements and other automated messages to the maintainer or intended clients. Its sending credential should remain independent of personal mailbox and administrator access.

Proposed Solution

Manage the sender, its restrictions and its recovery declaratively. Keep activation disabled until the native server and deployed delivery checks pass, and define how replies and delivery failures reach the maintainer.

Acceptance Criteria

  • Declare the dedicated sender and its disabled and enabled states without changing existing accounts, retained messages or the restricted agent route.
  • Use a separate, narrowly permitted service credential in approved custody, with verified independent recovery and idempotent recreation.
  • Enforce the sender identity in both the SMTP envelope and message headers; reject missing, ambiguous or incorrect identities in actual native-server tests.
  • Preserve authenticated transport and delivery limits, and prevent mailbox or administrator access through the sending credential.
  • Define and verify receiving, reply and delivery-failure behavior, including maintainer visibility.
  • Verify actual delivery to the approved maintainer destination and document the business-site integration contract.
  • Complete current-head validation, substantive review, protected merge, publication and deployed readback before activation is called delivered.

Alternatives Considered

A dedicated service identity keeps automation credentials and their lifecycle separate from human sign-in.

Additional Context

Part of #5030. Company Email identity, encryption and custody are tracked in #5387. The producing application is tracked in devantler-tech/business-site#374. Size: Medium.

Superseded by #5400; retain all delivery work on that original issue.

Activity

  1. coderabbitai commented on Oct 28, 2026

    @coderabbitai
    Contributor
    ⚠️ Possible Duplicate Issue(s)
    🔗 Related PRs

    #5367 - fix(mail): stage storage and verification before administration [merged]


    📝 Issue Planner

    Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.

    • Create Plan

    🧪 Issue enrichment is currently in open beta.

    You can configure auto-planning by selecting labels in the issue_enrichment configuration.

    To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

    issue_enrichment:
      auto_enrich:
        enabled: false

    💬 Have feedback or questions? Drop into our discord!

  2. moved this to 📥 Backlog in 🌊 Project Boardon Oct 28, 2026
  3. devantler commented on Oct 28, 2026

    @devantler
    ContributorAuthor

    🤖 Generated by the Agentic Engineer

    Duplicate of #5400. The original issue already covers this sender and remains the business-site dependency. Additional acceptance detail has been consolidated there.

  4. moved this from 📥 Backlog to ✅ Done in 🌊 Project Boardon Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Fields

    Priority

    None yet

    Start date

    None yet

    Target date

    None yet

    Effort

    None yet

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions