Dual-Account Google Workspace Sovereign Bridge & Outbound MIME Guard
“Automate Executive Gmail Triage & Proposal Drafting with a Code-Level Guard That Makes Unapproved External Sends Impossible.”
Direct OAuth2 REST bridge across corporate and personal Google Workspace accounts (Gmail, Calendar, Drive) that enforces draft-only RFC 2822 MIME staging, verifies recipient domains against active client context to prevent cross-client leaks, and resolves calendar buffer conflicts.
CLAIM: 100% draft-only Google Workspace AI email staging with recipient-domain mismatch blocking and automated calendar buffers. PROOF: Production dual-token bridge and MIME verifier (skills/google-workspace-sovereign-bridge/workspace_mime_guard.py --selftest PASS).
How do we let AI organize our Gmail inbox and draft client proposals while guaranteeing it can never accidentally send an email to a client?
Aria’s Google Workspace Sovereign Bridge hard-blocks `users.messages.send` at the code layer—routing 100% of external communications into `users.drafts.create` only after verifying that the recipient email domain matches the active client context, while automatically padding executive calendar blocks with 15-minute travel buffers.
Production Stack
Proven Production Guarantees
- Makes accidental AI email sends mathematically impossible by restricting all outbound Gmail operations to `users.drafts.create` with mandatory human signoff.
- Blocks cross-client data leaks by verifying that the target recipient email domain matches the active client workspace before staging any attachment or quote.
- Protects executive schedules by automatically calculating and inserting 15-minute prep and travel buffers around newly scheduled calendar events.
Implementation & Verification Runbook
Run the self-test to confirm cross-client recipient blocking and 15-minute calendar buffer conflict detection.
python skills/google-workspace-sovereign-bridge/workspace_mime_guard.py --selftest