OxyRelay puts an approval gate between AI agents and email

Field notes

OxyRelay separates inbound mail from agent authority: raw MIME is quarantined, models receive a Safety Envelope, and send requests become policy-checked Intents. The page’s example holds a remittance-change message under a “bank-change → hold” rule and shows operators the associated risk, draft, and next action. It also says uncertain deliveries should be reconciled rather than blindly retried. Workflow replay, paid billing, and some launch gates remain in development.