Security model
What chainmail protects, where the trust boundary sits, and what it leaves to the operating system.
The send policy
How the daemon checks every send against an allowlist, holds the rest as drafts, and gates the destructive actions.
Refs and cursors
How chainmail names messages with refs, pages through results with cursors, and what makes either go stale.
Untrusted content
How chainmail formats its output and marks text from messages and work items as untrusted data for agents.
The local cache
What the daemon keeps in cache.db, when the cache answers a search or a read instead of the mail server, and how each answer says where it came from.