Blog

Email for AI agents: identity, deliverability, oversight, and MCP. Every post is also served as markdown at /blog.md.

One passage retrieved without the page around it

6 August 2026 · 4 min read

Writing documentation an agent can actually answer from

Your agent answers from your help centre, which was written for people who are already reading it. What to change so retrieval finds the right passage and the answer is groundable.

Fixtures replayed, with actions asserted rather than wording

6 August 2026 · 3 min read

A test suite for an agent that writes email

How to write the golden thread harness in code: fixtures, assertions on actions rather than wording, a fake mail client, and the adversarial cases worth pinning.

Two keys valid at once, and one of them retiring

6 August 2026 · 4 min read

Rotating an agent's key without breaking it

Overlap windows, where keys actually leak from, what to do when one is exposed, and why the agent should never be the thing that holds the only copy.

One inbound address and many places the answer lives

6 August 2026 · 4 min read

One brand, forty branches, and an inbox that has to know which

Customers write to head office about a specific branch. How to route by location, whether each site gets its own agent, and who owns the reply when the answer is local.

A full inbox and an empty office

6 August 2026 · 4 min read

The week between Christmas and New Year

Coverage gaps are predictable, and so is what arrives during them. What an agent should do when nobody is available, what it must not promise, and how to hand back a backlog.

A message inside a message, with the author no longer on the thread

6 August 2026 · 4 min read

The forwarded message problem

A forward carries a stranger's words, a broken reply-to, and instructions the agent should not follow. How to parse one, who to answer, and why forwards break authentication.

Terms from two fields meeting in one system

6 August 2026 · 5 min read

The vocabulary of agent email, defined

SPF, DKIM, DMARC, MCP, threading, cold sends, suppression, idempotency. Every term that appears when you put an agent on an inbox, with what it means and why it matters.

Records that take ten minutes to write and three weeks to publish

6 August 2026 · 4 min read

Getting DNS records published when you do not control DNS

The technical setup takes ten minutes and the organisational one takes three weeks. Delegation, CNAME flattening, apex limitations, and how to hand records to whoever owns the zone.

One bad reply, and the trail back to its cause

6 August 2026 · 4 min read

It sent the wrong thing. Now what

A wrong reply has five common causes and each leaves a different trace. How to find which one it was, in order, without reading message bodies out of a log.

Two kinds of message arriving in the same inbox

6 August 2026 · 4 min read

The HR inbox, where the same policy is explained daily

Leave, payroll, benefits, and policy questions repeat endlessly and arrive alongside things that must never be automated. Where the line sits, and why confidentiality changes the design.

Status chasing across several sources into one answer

6 August 2026 · 4 min read

Where is my shipment, asked forty times a day

Freight runs on status chasing across carriers, ports, and time zones. What an agent answers from tracking data, what it must never commit to, and why exceptions are the real work.

Reception occupied while the inbox waits

6 August 2026 · 4 min read

Practice email, where the reception phone is already ringing

Dental, veterinary, and therapy practices run on appointments and reminders. What an agent handles for a small reception team, and the clinical line it must never approach.