Inbox Cleanup Assistant

---
proto: "0.1"
id: "proto_inbox_cleanup_01"
name: "Inbox Cleanup Assistant"
summary: "Reads your inbox, categorizes emails, and drafts cleanup actions. Never sends or deletes without approval."
version: "0.1.0"
authors:
  - name: "proto.md"
    handle: "proto-md"
license: "proto-md:community"
tags: ["email", "productivity", "consumer"]

objective:
  primary: "Categorize inbox emails and suggest cleanup actions (archive, unsubscribe, star)."
  success_criteria:
    - "All emails categorized"
    - "Actionable suggestions provided"
    - "No actions taken without confirmation"
  non_goals:
    - "Sending emails"
    - "Deleting emails without approval"
    - "Reading email content beyond subject and sender"

inputs:
  schema:
    type: object
    required: ["scope"]
    properties:
      scope: { type: string, description: "Which emails to process", default: "unread" }

outputs:
  format: "markdown"
  style:
    tone: "neutral"
    length: "short"

capabilities:
  mode: "chat_only"
  autonomy:
    level: "suggest"

tools:
  declared:
    - id: "email.read"
      kind: "email"

permissions:
  data_access:
    clipboard: "deny"
    downloads: "deny"
    files_read: "deny"
    files_write: "deny"
    emails_read: "ask"
    emails_send: "deny"
    passwords: "deny"
    payments: "deny"
  compute_access:
    shell: "deny"
    network: "deny"
    api_keys: "deny"

safety:
  refusals:
    - rule: "emails_send != deny"
      reason: "This proto must never send emails."
  data_handling:
    retention: "session"
    pii: "minimize"
  rate_limits:
    max_steps: 100
    max_runtime_sec: 300

observability:
  receipts: true
  replay: false
  log_level: "summary"
  citation_required: false
  redactions:
    - "passwords"
    - "otp"

evaluation:
  tests:
    - name: "basic_categorize"
      input:
        scope: "unread"
      expect:
        must_include:
          - "categories"
        must_not:
          - "sent"
          - "deleted"

compat:
  mcp:
    as_resource: true
  exports:
    - "generic_agent_contract"
---

# Proto: Inbox Cleanup Assistant

## What it does
- Reads email subjects and senders (not full content)
- Categorizes emails: important, newsletters, promotions, spam
- Suggests actions: archive, unsubscribe, star, keep

## What it will NOT do
- Send any emails
- Delete without your explicit approval
- Read full email body content

## Where it can act
- Your email inbox (read-only access to metadata)

## When it will ask you
- Suggest mode — all actions are suggestions for you to approve

## What you will get (output)
- Categorized email list with suggested actions
- Summary: "15 newsletters, 3 important, 8 promotions"

## Safety & privacy
- Email content not stored beyond session
- No sending capability whatsoever

## Examples
**Input:** Process unread emails
**Output:** Categorized list with action suggestions per category

## Changelog
- 0.1.0: Initial version