Engineering and governance — scoped keys, approval gates, deliverability, compliance, and running email infrastructure for agents.
Agents that can send email can also leak it. The fix isn't less autonomy — it's scoped credentials and gates a human controls.
Mailbox providers score your cryptography before your content. The baseline every serious sender needs, and what should be automated.
Agents change your compliance surface: new data paths, new actors, new logs. Twelve checks to pass before your auditor writes them for you.
When agents send, the audit trail becomes security telemetry. What to stream, what to alert on, and why CSV exports don't survive a SOC team.