Allowlist and denylist rules for agent email, backed by Lists

The usual way to keep an AI email agent from talking to the wrong people is a hardcoded set in your application code:

ALLOWED_DOMAINS = {"yourcompany.com", "customer.example"}

Enter fullscreen mode

Exit fullscreen mode

That works, and for a single internal agent it's the right call. But the moment a non-engineer needs to add a customer domain, or you want the same allowlist to govern five different agents, or you want it to apply to mail coming in and not just going out, that set in code becomes a deploy-shaped bottleneck. Every change is a PR, a review, a release.