{"id":"bumpgrade-admin-for-mark-source-data","source":"d1","loadError":null,"attentionItems":[{"id":"mark-attention-2026-05-25-email-sender-domain-before-subscriber-delivery","category":"blocked","state":"open","urgency":"medium","title":"Choose and verify audience sender before subscriber email delivery","summary":"Issue #420 can prepare owner-only tests and delivery-run code, but real subscriber broadcast/sequence delivery should stay blocked until the intended audience sender is verified and allowed in Cloudflare Email Sending.","details":"Owner-action email accepted by Cloudflare Email Sending on 2026-05-26 and recorded in D1 outbound record codex-outbound-owner-action-email-sender-domain-1779829480498. Keep #420 parked until the owner confirms the subscriber-facing audience sender/domain and it is verified/configured with the provider and Cloudflare Email Sending allowed senders.","requiredAction":"Confirm the audience sender address/domain to use for subscriber-facing Bumpgrade email, then verify/configure it with the provider and update Cloudflare Email Sending allowed sender addresses.","responseInstructions":"This page is read-only. Comment on Issue #420 with the approved sender address, or say to keep all subscriber delivery blocked for now.","sessionName":"bumpgrade-build-heartbeat","sessionEmail":"codex@bumpgrade.com","sourceAgent":"Codex","sourceKind":"codex","links":[{"label":"Issue #420","url":"https://github.com/markitics/bumpgrade/issues/420"},{"label":"wrangler email binding","url":"https://github.com/markitics/bumpgrade/blob/main/wrangler.jsonc#L64-L68"},{"label":"Audience source data","url":"https://bumpgrade.com/audience/source-data"},{"label":"For the owner","url":"https://bumpgrade.com/admin/for-mark"}],"metadata":{"issue":420,"currentAllowedSender":"codex@bumpgrade.com","mode":"fail-closed-until-sender-domain-verified","ownerActionEmailStatus":"accepted","ownerActionEmailRecordId":"codex-outbound-owner-action-email-sender-domain-1779829480498","ownerActionEmailSubject":"MARK ACTION REQUIRED: choose Bumpgrade audience sender domain"},"lastActivityAt":"2026-05-26T21:05:28.000Z","createdAt":"2026-05-25T04:49:00.000Z","responseChannels":[{"id":"read_only","label":"/admin/for-mark is read-only","instructions":"This page shows attention items and links; it does not accept replies or direct actions yet.","href":null},{"id":"github_issue","label":"Comment on Issue #420","instructions":"Use the GitHub issue for durable project-visible comments, decisions, and unblock notes.","href":"https://github.com/markitics/bumpgrade/issues/420"},{"id":"project_email","label":"Email codex@bumpgrade.com","instructions":"Use project email only when the card explicitly names an email path.","href":"mailto:codex@bumpgrade.com"},{"id":"codex_desktop","label":"Active Codex Desktop thread","instructions":"Use the current Codex Desktop thread when this card belongs to the active workstream you are already discussing.","href":null}]},{"id":"mark-attention-2026-05-18-rkmoriarty-auth-alignment","category":"review","state":"open","urgency":"medium","title":"Confirm authenticated sender alignment for a private trusted sender","summary":"The first real reply proved D1/R2 inbound capture, but strict sender verification cannot treat From text alone as proof.","details":"Cloudflare authentication headers on the owner's first reply showed dmarc=none for runtime domain evidence.com and spf=pass for runtime sender evidence.com. Issue #61 hardens Codex so only the three addresses the owner listed can steer it, and only when authentication evidence aligns.","requiredAction":"If a private trusted sender should steer Codex directly, configure aligned SPF/DKIM/DMARC for that sending path or use a private trusted sender / a private trusted sender until alignment is verified.","responseInstructions":"This page is read-only. Reply to codex@bumpgrade.com or comment on issue #61 after the preferred authenticated sender path is confirmed.","sessionName":"bumpgrade-bootstrap","sessionEmail":"codex@bumpgrade.com","sourceAgent":"Codex","sourceKind":"codex","links":[{"label":"Issue #61","url":"https://github.com/markitics/bumpgrade/issues/61","kind":"issue"},{"label":"Codex mail workflow","url":"https://bumpgrade.com/admin/for-mark","kind":"admin"}],"metadata":{"blocksShippedEmail":false,"blocksUntrustedInput":true},"lastActivityAt":"2026-05-18T14:17:27.000Z","createdAt":"2026-05-18T14:17:27.000Z","responseChannels":[{"id":"read_only","label":"/admin/for-mark is read-only","instructions":"This page shows attention items and links; it does not accept replies or direct actions yet.","href":null},{"id":"github_issue","label":"Comment on Issue #61","instructions":"Use the GitHub issue for durable project-visible comments, decisions, and unblock notes.","href":"https://github.com/markitics/bumpgrade/issues/61"},{"id":"project_email","label":"Email codex@bumpgrade.com","instructions":"Use project email only when the card explicitly names an email path.","href":"mailto:codex@bumpgrade.com"},{"id":"codex_desktop","label":"Active Codex Desktop thread","instructions":"Use the current Codex Desktop thread when this card belongs to the active workstream you are already discussing.","href":null}]}]}