Direct actions on chosen messages: mark, move, archive and delete, through the same apply as rules, which the
daemon’s sync loop runs; plus the dry-run and rule preview helpers the CLI and the MCP server share.
Sender brand logos (BIMI): which DNS record a message may show the logo of, the logo’s URL in that record, and a
week-long cache per record. Only mail that passed DMARC for its From domain, by the receiving server’s own
Authentication-Results, gets a logo; anyone can put a brand’s selector on spoofed mail. Nothing here logs: a
lookup tells whoever reads the log who mails you.
Crash reports, written to the crash folder and never sent anywhere. They hold no mail data: actions by variant
name, thread names up to their first non-word character, and panic messages only when they are literals.