A defensive publication establishing public prior art for auto-provisioning per-agent email mailboxes — with lazy idempotent domain creation, slug-based address synthesis, dual-identifier (provisioning vs. session) account resolution, and credential rehydration that survives process restarts.
This repository is a Technical Defensive Publication. It is published to establish a dated, public, citable record of prior art so that the techniques described herein remain free for anyone to practice and cannot be monopolized by a later patent filed by a third party.
- Publisher: Gus IT LLC (Florida, USA)
- Author: Gustavo Assuncao, PhD
- Publication date: 2026-06-25
- Version: 1.0
- Document type: Technical Defensive Publication (public prior art)
- Classification: Public
- License: AGPL-3.0-or-later (copyleft; commercial license available)
Multi-agent platforms increasingly assign each autonomous AI agent ("persona") its own first-class email identity so the agent can send, receive, and triage mail like a human colleague. Doing this at scale exposes four under-addressed engineering problems. First, classic provisioning APIs require an explicit per-tenant domain setup step before any account can be created, which couples agent creation to tenant onboarding. Second, an email address must be synthesized deterministically and collision-safely from an agent's human-readable identity. Third, modern JMAP mail servers expose a provisioning-time account identifier that is distinct from the session-time account identifier a client must use on the JMAP wire — a mismatch that silently breaks reads and writes if conflated. Fourth, the app-passwords minted during provisioning live in process memory and are lost on every server restart, silently disabling all agent mail until manual repair.
This publication discloses a unified method that resolves all four: (a) lazy, idempotent domain creation performed on the first agent for a domain and treated as a no-op thereafter; (b) slug-based local-part synthesis with tenant-scoped collision detection; (c) dual-identifier resolution, persisting the provisioning-account-identifier while resolving the session-account-identifier on-demand from a JMAP session call and caching it; and (d) credential rehydration, reloading every persisted agent credential from an encrypted store into the in-process client cache at boot so mail operations work immediately after a restart — without re-provisioning. The combination yields working mailboxes within seconds of agent creation and high post-restart availability with zero manual steps.
We publish this defensively. We believe per-agent mailbox provisioning with restart-survivable credential rehydration is a building block that the whole agentic-software community should be free to use. By placing a complete, enabling technical description into the public record on a fixed date, we create prior art that bars others from later patenting these techniques and keeps them practiceable by everyone — including us. This is the same posture as a defensive publication deposited to IP.com or Zenodo: disclosure as a shield, not a sword.
| Document | What it contains |
|---|---|
| DEFENSIVE-PUBLICATION.md | The full technical whitepaper: architecture, mechanics, data model, claims, prior-art delta, evaluation, standards mapping. |
| docs/PRIOR-ART.md | Fuller prior-art landscape, delta table, and honesty attestation. |
| docs/FIGURES.md | All Mermaid figures with captions (Figure 1..N). |
| docs/OPEN-SOURCE-APP.md | The planned open-source reference app and its Kubernetes/AKS deployment sketch. |
| src/ | Original, clean-room illustrative reference implementation of the novel mechanism. |
| LICENSE / NOTICE | AGPL-3.0-or-later license text and attribution. |
| CITATION.cff | How to cite this publication. |
This publication is intended to seed a small open-source reference application — an Agent Mailbox Provisioner — that reduces the disclosed method to runnable practice against any JMAP-capable mail server. See docs/OPEN-SOURCE-APP.md for scope, architecture, and a generic AKS/Kubernetes deployment sketch.
Licensed under AGPL-3.0-or-later (see LICENSE and NOTICE). The AGPL-3.0-or-later grant includes an express patent license, reinforcing the defensive intent.
To cite, see CITATION.cff. Suggested short form:
Assuncao, G. (2026). Persona Mailbox Auto-Provisioning with Credential Rehydration (Version 1.0) [Technical Defensive Publication]. Gus IT LLC.
Deposit: to be assigned (IP.com / Zenodo / arXiv) — establishes a public, dated, citable prior-art record.