JMAP

Jochen can now read his mailbox over JMAP via an MCP sidecar — after three architectures, an SSRF guard, and an upstream bug in the auth layer.

Personas may draft external communication, but a human presses send — so the draft folder itself became the gate.