Interface IAuthoredSendAuditor

Namespace

MailFathom.Application.Mail.Delivery.Governance

Assembly

MailFathom.Application.dll

Records that a caller asked this deployment to send something, and what it was allowed to ask under.

public interface IAuthoredSendAuditor

Remarks

This is what turns "an agent sent something odd" from a suspicion into something an owner can read. What a send is answerable for afterwards is who asked, under which grant, for which act, and which record came of it — four facts that are each MailFathom's own name for something rather than anything a message said.

Nothing about the message crosses it. No subject, no body, no address, no attachment name, no prompt, and nothing a model produced beyond the record that already holds it. The outgoing record is where the message lives and it is named here by its identity alone, so a reader who is entitled to the message goes and reads it and a reader of this record learns only that one was sent.

The port is deliberately one operation wide, for the reason the folder mapping auditor's is: what stands behind it is undecided — a log today, and an evidence store once a governance layer consumes it — and a narrow surface is what keeps a second code path from acquiring a way to write a caller's identity anywhere.

It fails no send. The record is durable and the message is on its way by the time this is called, so a sink that cannot write must report and let the send stand rather than raise: a hole in the evidence is worse than nothing only for whoever reads it, while a send failed by its own audit is a message the owner asked for and did not get.

Methods

RecordAuthoredSendAsync(AuthoredSend, CancellationToken)

Records one send a caller asked for.