Step 6 of 7
Mailboxes, senders and labels no agent may ever read. Set before anything is built.
Nothing enforces these yet. What you add here is stored and nothing reads it. No study runs on this installation, so nothing is being read at all — but the moment one does, it has to consult this list first, and until it demonstrably does, this notice stays. The runtime has one function to call: limitsFor.
Nothing is ruled out. That is a choice rather than a default — every mailbox, sender and label the grant covers is in scope until something here says otherwise.
- Anything with salaries in it. Payroll, HR, offer letters.
- Your lawyer and your accountant. Privilege is not something a product should have an opinion about.
- Anybody’s personal mail that happens to arrive at a work address.
- A label you already use for the things nobody else should see. One entry here covers everything under it.