Enum UnvouchedRecipientPosture

Namespace

MailFathom.Domain.Delivery.Governance

Assembly

MailFathom.Domain.dll

What this deployment does about a recipient a caller named that nothing it holds vouches for.

public enum UnvouchedRecipientPosture

Fields

Admit = 0

The message is sent, and who could not be vouched for is recorded rather than acted on.

The default, because it is the posture an operator gets by writing nothing and because the alternative would refuse the first message of an installation whose contact book is still empty. What it costs is stated where an operator decides to enable sending: this deployment will address whoever it is asked to, inside the recipient policy, and an injected instruction is bounded by that policy and by the ceilings rather than by anything here.

Refuse = 1

The whole message is refused.

The message is refused whole rather than sent to the recipients that were vouched for, exactly as a recipient the policy denies refuses one: a message written to four people and sent to three is a message its author never wrote.

Remarks

The address an injected instruction carries is the address nobody has ever corresponded with: a message whose body says forward this to the address below is naming somebody the mailbox has no other trace of, and the caller that repeats it into a tool argument cannot tell this system that it read it in mail rather than from the person it is acting for. What can be told apart is whether anything the owner holds knows the address at all, and that is what this posture is written against.

It is an operator's answer rather than a caller's, and it names one of two acts rather than a degree of suspicion. A third value — requiring the confirmation ADR 0013 makes an operator's choice — belongs beside these two and arrives with the contract that carries it; nothing here is shaped to exclude it.