{"guide_id":12,"guide_group":"wordpress_operational_guides","guide_path":"Operations Manual / Operational Knowledge Base / Email Alias Manager","slug":"email-alias-manager","title":"Email Alias Manager","wp_status":"private","content_html":"<h1>Email Alias Manager</h1>\n\n<p><strong>Subsystem:</strong> WSAI_EmailAliasManager_v1</p>\n<p><strong>Status:</strong> Production Validated / Locked</p>\n\n<h2>Purpose</h2>\n<p>The Email Alias Manager governs approved email aliases, mailbox identities, alias-to-mailbox authorization, and Postfix routing synchronization for self-hosted WickedSpooky.ai mail infrastructure.</p>\n\n<h2>Authority Model</h2>\n<ul>\n<li>MariaDB wsai_ops = alias governance authority</li>\n<li>Postfix/Dovecot = runtime mail delivery layer</li>\n<li>Roundcube = webmail client layer</li>\n<li>WordPress Knowledge Base = operational documentation layer</li>\n</ul>\n\n<h2>Validated Architecture</h2>\n<ul>\n<li>Shared alias visibility is governed by mailbox/user authorization.</li>\n<li>Alias addresses are domain-specific governed objects.</li>\n<li>Mailbox identities are domain-independent user identities.</li>\n<li>Aliases may deliver to one or more authorized mailbox destinations.</li>\n<li>Runtime mailboxes must exist before mailbox identities are promoted to active governance.</li>\n</ul>\n\n<h2>Current Validated Mailbox State</h2>\n<ul>\n<li>Validated mailbox identity: sam</li>\n<li>Additional active mailbox identity: sheri</li>\n<li>Planned mailbox identity: chris</li>\n<li>Current validation gate status: PASS</li>\n</ul>\n\n<h2>Active Self-Hosted Mail Domains</h2>\n<ul>\n<li>secondactsam.com</li>\n<li>wickedspooky.org</li>\n<li>wickedspooky.ai</li>\n</ul>\n\n<h2>Planned Domains</h2>\n<ul>\n<li>artofsheri.com</li>\n<li>blueroseretreats.com</li>\n</ul>\n\n<h2>Runtime Notes</h2>\n<ul>\n<li>Mail host remains Postfix/Dovecot only.</li>\n<li>Roundcube runs on the web host.</li>\n<li>Alias governance must remain separate from domain DNS/MX routing governance.</li>\n<li>Do not create mailbox users in governance before corresponding runtime mailboxes exist.</li>\n</ul>\n\n<h2>Validation Query</h2>\n<pre>\nSELECT *\nFROM v_mailbox_governance_validation_gate;\n</pre>\n\n<h2>Known Good Validation Result</h2>\n<pre>\nmailbox_identities: 3\nactive_mailboxes: 2\nplanned_mailboxes: 1\nactive_runtime_drift: 0\nroundcube_runtime_drift: 0\nactive_alias_authorization_drift: 0\nvalidation_status: PASS\n</pre>\n\n<h2>Bootstrap Usage</h2>\n<pre>\nBootstrap Repository:\nWSAI_EmailAliasManager_v1\n</pre>\n\n<h2>Related Subsystems</h2>\n<ul>\n<li>WSAI_DomainMailRouting_v1</li>\n<li>WSAI_RoundcubeDeployment_v1</li>\n<li>WSAI_OperationalKnowledgeBase_v1</li>\n</ul>","content_text":"Email Alias Manager\n\nSubsystem: WSAI_EmailAliasManager_v1\nStatus: Production Validated / Locked\n\nPurpose\nThe Email Alias Manager governs approved email aliases, mailbox identities, alias-to-mailbox authorization, and Postfix routing synchronization for self-hosted WickedSpooky.ai mail infrastructure.\n\nAuthority Model\n\nMariaDB wsai_ops = alias governance authority\nPostfix/Dovecot = runtime mail delivery layer\nRoundcube = webmail client layer\nWordPress Knowledge Base = operational documentation layer\n\n\nValidated Architecture\n\nShared alias visibility is governed by mailbox/user authorization.\nAlias addresses are domain-specific governed objects.\nMailbox identities are domain-independent user identities.\nAliases may deliver to one or more authorized mailbox destinations.\nRuntime mailboxes must exist before mailbox identities are promoted to active governance.\n\n\nCurrent Validated Mailbox State\n\nValidated mailbox identity: sam\nAdditional active mailbox identity: sheri\nPlanned mailbox identity: chris\nCurrent validation gate status: PASS\n\n\nActive Self-Hosted Mail Domains\n\nsecondactsam.com\nwickedspooky.org\nwickedspooky.ai\n\n\nPlanned Domains\n\nartofsheri.com\nblueroseretreats.com\n\n\nRuntime Notes\n\nMail host remains Postfix/Dovecot only.\nRoundcube runs on the web host.\nAlias governance must remain separate from domain DNS/MX routing governance.\nDo not create mailbox users in governance before corresponding runtime mailboxes exist.\n\n\nValidation Query\n\nSELECT *\nFROM v_mailbox_governance_validation_gate;\n\n\nKnown Good Validation Result\n\nmailbox_identities: 3\nactive_mailboxes: 2\nplanned_mailboxes: 1\nactive_runtime_drift: 0\nroundcube_runtime_drift: 0\nactive_alias_authorization_drift: 0\nvalidation_status: PASS\n\n\nBootstrap Usage\n\nBootstrap Repository:\nWSAI_EmailAliasManager_v1\n\n\nRelated Subsystems\n\nWSAI_DomainMailRouting_v1\nWSAI_RoundcubeDeployment_v1\nWSAI_OperationalKnowledgeBase_v1","content_sha256":"a618161fe9e3d80e9be9128b9c2dd803b409c26992e392844e552b8e93d23d84","source_system":"wordpress","source_post_id":35,"parent_source_post_id":29,"last_source_modified":"2026-05-31 04:08:17","imported_at":"2026-06-03 22:24:58","is_active":1}