- Shipped
- September 29, 2026 at 1:14 AM UTC
- Author
- Kamo
- Commit
- fc4db1f
EmailService now refuses a send whose recipient names one of the organization's own mail domains but matches no mailbox, alias or member (RECIPIENTS_UNKNOWN, a companion fix). mail_send/reply/forward all funnel through MailPack.sendEmail, so one change covers all three: the DownstreamClient's ToolFailure for that specific reason is re-thrown with an instruction naming the fix, rather than left as a bare "the request was rejected" the model cannot act on. Every other rejection (RECIPIENTS_REJECTED — the mail server's own bounce — or anything else) is untouched. This is the other half of D-luna-1: Luna guessed an address instead of calling directory_search_members, which already returns a colleague's real work email **************** SecurityService) and was never the gap. Tests: MailPackTest gained a case pinning the enrichment on RECIPIENTS_UNKNOWN and its absence on RECIPIENTS_REJECTED. heavy mvn test **************** 16 run, 0 failures.