The Cyberpigeon blog

Notes on building agents that work with email. Practical decisions, from the first inbox to the reply that reaches its destination.

Give your agent an inbox with clear boundaries

Start an email agent with one inbox and read-only access. Separate untrusted email from instructions, review replies and keep permission controls outside the model.