Repository navigation

Check a send grant on every outbound mail - #259

Merged

alexanderguy merged 15 commits into

mainfrom

intr-710-check-a-send-grant-on-every-outbound-mail

Nov 7, 2026

Merged

Check a send grant on every outbound mail#259
alexanderguy merged 15 commits into
mainfrom
intr-710-check-a-send-grant-on-every-outbound-mail

Commits on Nov 7, 2026
- Remove the unused mail send domain approval string
  alexanderguy
  committed
  150fa18
- Generalize the mail coordinate grammar and grant evaluator
  alexanderguy
  committed
  76d273a
- Rank coordinate grants by their coordinate pattern alone
  alexanderguy
  committed
  cf515d1
- Add the mail send grant vocabulary and evaluator
  alexanderguy
  committed
  f5997fa
- Share the reserved grant requirement namespace check
  alexanderguy
  committed
  bf5acb3
- Skip reserved grant requirements that a stored snapshot carries
  alexanderguy
  committed
  b87378c
- Stage a send grant at first trigger for every run principal
  alexanderguy
  committed
  c912e14
- Reserve the mail send namespace from workflow grant requirements
  alexanderguy
  committed
  a8babd2
- Give owner and admin system roles a tenant send grant
  alexanderguy
  committed
  9362499
- Reject mail send grants that can never decide a send
  alexanderguy
  committed
  2cde754
- Resolve local mail parties without reading signing keys
  alexanderguy
  committed
  0ee1a1a
- Add the mail send authorizer
  alexanderguy
  committed
  d66a7b4
- Backfill send grants for existing deployments and users
  alexanderguy
  committed
  02a7a87
- Check the send grant on sidecar relayed mail
  alexanderguy
  committed
  658f6e1
- Check the send grant on REST run mail
  alexanderguy
  committed
  41120aa