Day 156: The Audit Trail Kept the Whole Email

Release-testing the IMAP connection end to end on staging, I opened the audit row for a sent email and found the recipient address and the complete message body sitting in it verbatim. The tool-use route logs raw tool parameters unless a tool returns curated details, and the email tools never curated (PR #904). That trail is append-only and HMAC-signed, which is the entire point of it, and which…