Refresh recomputes relationship profiles, thread importance, repetitive groups, and policy recommendations from the mailbox data already scanned.

Purchase the one-time Rescue or refresh an existing entitlement.

Pilot is the default RC16 release mode. Maintenance blocks user write operations but keeps billing webhooks and status endpoints available.

First deployment operations

RC16 verifies the deployed staging domain, D1 migration ledger, security headers, OAuth/encryption prerequisites, billing routes, a real deployment-queue round trip, Cloudflare resource presence, OAuth callback construction, unsigned billing-webhook rejection, and the deployed Worker/source/environment provenance. After that infrastructure proof passes, run the live Gmail/payment pilot below. Production promotion requires the signed RC16 proof for the exact ZIP, Worker version, live evidence, and passed pilot.

Evidence-driven RC16 pilot. Select a connected Gmail staging mailbox, then prove initial scan, incremental sync, intelligence safety, explicit organize permission, a small reversible execution and complete undo, $19 test Rescue entitlement, disconnect/reconnect, privacy export and support snapshot. RFC 8058 unsubscribe is tested when the mailbox contains an eligible one-click candidate.

Bind the exact deployed Worker, signed staging provenance, passed production Gmail certification, verified D1 backup, health verification, a real 1–20 item reversible production workflow with full undo, commercial entitlement, and zero unresolved critical incidents before deployed-fixed finalization.

Keep Outlook/Microsoft 365 public admission closed until the exact deployed alpha artifact proves Microsoft Graph scan + delta sync, protected-mail invariants, delegated Mail.ReadWrite, a 1–20 item reversible move/archive/trash batch with complete undo, reconnect recovery, privacy export, support evidence and zero unresolved critical incidents.

Certify a dedicated staging user against the exact Alpha 9 Worker. A passed run can issue a short-lived signed Ed25519 connector attestation for production promotion.

Production MCP/AI stays closed until a signed Alpha 9 staging connector attestation is verified. Admit only explicit canary users, observe real MCP/AI activity, and automatically close on provenance drift, privacy violations, provider failures, or critical incidents.

Expand only after a passed production canary. Limited users remain explicitly enrolled and are protected by atomic daily MCP/AI call quotas, AI payload-byte caps, error-rate containment and evidence-driven observation.

Public MCP/AI admission remains closed until the exact Alpha 9 promotion has a passed limited-rollout observation, enough distinct real users and connector activity, MCP/AI success and p95 latency SLOs, zero privacy violations, zero unresolved critical incidents, and explicit operator sign-off. Limited-rollout quotas remain active after public open.

Freeze the exact Beta 2 production artifact, bind the passed Beta 1 field evidence, then prove provider parity, portfolio regression, billing/Google readiness, recovery/support and optional connector readiness before authorizing RC1.

Observe real Beta 1 users across Gmail, Microsoft, sync, reversible execution/undo, portfolio, billing and feedback before authorizing Beta 2.

Qualify the exact deployed-fixed Alpha 9 artifact for the 1.1 beta branch. Gmail production certification, Microsoft parity, real multi-mailbox portfolio evidence, billing/Google readiness, resilience/support proof and zero critical incidents are mandatory. MCP/AI connector GA + account governance are required only when optional connectors are enabled.

Freeze the exact RC20 artifact only after current GA and resilience proof. Stable eligibility additionally requires an elapsed GA-open observation window, enough real SLO samples, current migration ledger, live billing/Google gates, recent support evidence and zero unresolved critical incidents.

Certify the exact RC20 production baseline with a real verified backup, controlled restore rehearsal, measured RTO/RPO, rollback, queue recovery, OAuth continuity, billing reconciliation, undo continuity, privacy export and incident-response evidence.

Public admission stays closed until the exact RC20 deployed-fixed baseline, normal rollout, founding graduates, production Gmail/Google gates, live billing routes and SLO evidence pass. Open GA additionally requires a passed public canary.

Issue single-use invite codes, review active founding access, and graduate only journeys backed by real scan, intelligence, reversible cleanup + undo, commercial and support evidence.

Enroll only approved mailboxes, keep execution/unsubscribe/automation/billing behind policy and kill switches, record observation samples, automatically contain critical safety breaches, and widen pilot → limited → expanded → normal only from passed evidence.

Production release stays blocked until required configuration and external Google verification are complete. A certification run records the real Gmail connect → scan → sync → reversible cleanup → undo → unsubscribe → billing → privacy path.

API keys, seller keys and webhook secrets must be installed as Cloudflare Worker secrets. Admin Settings stores only enablement, routing, test/live mode and non-secret provider identifiers.

Allocates already-approved reversible candidates against your remaining monthly action allowance. It never creates or executes a mailbox batch.