{
  "schema": "aenet.email.public.v1",
  "version": "1.0.0",
  "snapshotVersion": 1,
  "schemaVersion": "aenet.email.public.v1",
  "systemId": "mail",
  "publicId": "SYS.COM.01",
  "registryId": "SYS.COM.01",
  "domain": "communication",
  "title": "AENET Mail",
  "summary": "AENET Mail is the encrypted workspace mail system of AENET. It provides a private mailbox workspace (inbox, compose, reader, contacts, account) with end-to-end encryption primitives, a mail gateway, and an email archive pipeline. This public snapshot is a sanitized, read-only description of the system. It exposes NO live mailbox, NO account access, NO message content, and NO control surface.",
  "status": "development",
  "releaseStage": "development",
  "publicBoundary": "SNAPSHOT_ONLY",
  "liveMailboxAccess": false,
  "publicAccountAccess": false,
  "publicControl": false,
  "capabilitiesPublic": [
    {
      "id": "mail.workspace",
      "title": "Encrypted workspace mail"
    },
    {
      "id": "mail.inbox",
      "title": "Folder-based inbox"
    },
    {
      "id": "mail.compose",
      "title": "Compose + send"
    },
    {
      "id": "mail.contacts",
      "title": "Contact list"
    },
    {
      "id": "mail.e2ee",
      "title": "End-to-end encryption primitives"
    },
    {
      "id": "mail.gateway",
      "title": "Mail gateway service"
    },
    {
      "id": "mail.archive",
      "title": "Email archive deployer + DNS planning"
    },
    {
      "id": "mail.compression",
      "title": "Payload compression"
    }
  ],
  "architectureSummary": {
    "layers": [
      "Public boundary (read-only overview + snapshot export)",
      "Private workspace application (mail, contacts, account settings)",
      "Mail services (email engine, mail gateway, backend client, crypto, archive deployer)",
      "Private data layer (messages, attachments, contacts, workspace state)",
      "Boundary (public export snapshot — one-way)"
    ],
    "dataFlow": "private runtime → sanitized snapshot → public registry → static site",
    "privateNote": "Private structure is described only at capability level; no internal paths are published."
  },
  "securityBoundary": "AENET Email is a private system. The public cloud observes a sanitized snapshot only; it never controls, writes, or reaches the email runtime, database, mailbox, secrets, or 127.0.0.1 surface. The connection is an artifact contract (EXPORTS_SANITIZED_SNAPSHOT), never a network control channel.",
  "publicInterfaces": [
    {
      "kind": "artifact",
      "id": "aenet.email.public.v1",
      "description": "versioned public snapshot contract"
    },
    {
      "kind": "page",
      "id": "/system/mail",
      "description": "static public overview page (all locales)"
    }
  ],
  "publicEvidence": {
    "structure": {
      "verifyStatus": "VERIFIED",
      "sourceHash": "a7b093218c3caecef2fd83c277a2573d99402d863b01b72be1d9fd20443dca96",
      "shards": 16,
      "nodes": 88,
      "edges": 86
    },
    "tests": {
      "command": "npm test",
      "pass": 269,
      "fail": 0,
      "total": 269,
      "evidenceFiles": [
        "tests/crypto.test.js",
        "tests/email-archive-deployer.test.js",
        "tests/email-archive-dns.test.js",
        "tests/mail-gateway.test.js",
        "tests/data-foundation.test.js",
        "tests/abvs.test.js"
      ]
    },
    "runtime": {
      "entrypoint": "server.js",
      "bind": "loopback-only",
      "livePublicExposure": false,
      "publicApiSurface": "none"
    }
  },
  "relatedSystems": [
    "aenet-cloud-public",
    "public-snapshot-layer",
    "development-queue",
    "identity"
  ],
  "sourceStructureHash": "a7b093218c3caecef2fd83c277a2573d99402d863b01b72be1d9fd20443dca96",
  "generatedAt": "2026-08-18T09:52:22.513Z",
  "publicContentHash": "e00e11e4c699d88250ea3de143667b95b00f257f54beb26daeb7d6edcad0db23",
  "import": {
    "schema": "aenet.public.mail-import.v1",
    "importedBy": "aenet-cloud-public",
    "mode": "ONE-WAY / SANITIZED / REGISTRY-DRIVEN / STATIC-FIRST",
    "relationship": "EXPORTS_SANITIZED_SNAPSHOT"
  },
  "contentHash": "3d146cc7bab32056"
}