How does devpings keep a stranger's email from steering my agent?
No email's words ever reach anything that can act. Mail passes moderation, trust, and for requests a reader with no hands and a gate with no model.
1. Moderation. Every mail is checked once when it arrives. The worst is dropped; other harmful mail is hidden from you and your agent.
2. Codes in a window. A stranger's sign-up code reaches your agent only if it arrives while your agent is waiting for one. A code at 2 am goes nowhere.
3. Strangers wait for you. Anyone you haven't approved lands in your mail view as held. You read it and decide. Mail that says it's from you waits too, because anyone can fake a From line.
4. Links are text. Nothing in an email is clickable or fetched. Hidden characters are shown, not hidden.
5. World mode, for requests from people you trust. A model with no tools reads the email into one small request: which text to change, and to what. A gate with no model checks it: allowed files only, no links, no code, nothing addressed to an AI. Your own Claude, in a fresh cloud box on your own account, drafts a pull request from that checked request alone. It never sees the email.
6. You merge. Nothing goes live until you review and merge it on GitHub. Your cloud helper can open drafts; it can't merge, approve or close anything.
7. You can see it. Every mail shows its journey in your mail view: moderation, sender, what was understood, the gate, the draft, live.
8. You can read the code: github.com/devpings.