Email Alias Manager

Subsystem: WSAI_EmailAliasManager_v1

Status: Production Validated / Locked

Purpose

The Email Alias Manager governs approved email aliases, mailbox identities, alias-to-mailbox authorization, and Postfix routing synchronization for self-hosted WickedSpooky.ai mail infrastructure.

Authority Model

• MariaDB wsai_ops = alias governance authority
• Postfix/Dovecot = runtime mail delivery layer
• Roundcube = webmail client layer
• WordPress Knowledge Base = operational documentation layer

Validated Architecture

• Shared alias visibility is governed by mailbox/user authorization.
• Alias addresses are domain-specific governed objects.
• Mailbox identities are domain-independent user identities.
• Aliases may deliver to one or more authorized mailbox destinations.
• Runtime mailboxes must exist before mailbox identities are promoted to active governance.

Current Validated Mailbox State

• Validated mailbox identity: sam
• Additional active mailbox identity: sheri
• Planned mailbox identity: chris
• Current validation gate status: PASS

Active Self-Hosted Mail Domains

• secondactsam.com
• wickedspooky.org
• wickedspooky.ai

Planned Domains

• artofsheri.com
• blueroseretreats.com

Runtime Notes

• Mail host remains Postfix/Dovecot only.
• Roundcube runs on the web host.
• Alias governance must remain separate from domain DNS/MX routing governance.
• Do not create mailbox users in governance before corresponding runtime mailboxes exist.

Validation Query

SELECT *
FROM v_mailbox_governance_validation_gate;

Known Good Validation Result

mailbox_identities: 3
active_mailboxes: 2
planned_mailboxes: 1
active_runtime_drift: 0
roundcube_runtime_drift: 0
active_alias_authorization_drift: 0
validation_status: PASS

Bootstrap Usage

Bootstrap Repository:
WSAI_EmailAliasManager_v1

Related Subsystems

• WSAI_DomainMailRouting_v1
• WSAI_RoundcubeDeployment_v1
• WSAI_OperationalKnowledgeBase_v1