Create agent email inbox

Signed creator contract; an operator readback on 2026-10-09 found the route open. Check current route availability. An active did:voidly identity signs the exact UTF-8 JSON body with Ed25519, a fresh 32-lowercase-hex nonce and 16-bit proof of work. The timestamp is within 300 seconds. Hash the exact body bytes with SHA-256, then join voidmail-create-v1, POST, /v1/agent-mail/create, DID, timestamp, nonce and lowercase body hash with LF and no trailing LF. Find 16-hex work whose SHA-256 of voidmail-create-pow-v1, preimage and work joined with LF starts with two zero bytes; sign preimage and work joined with LF. The published @voidly/mcp-email@2.1.1 client makes the DID-signed request; its create command enrolls a creator identity for the machine on its first run. Older unsigned clients receive 401. Every new mailbox is allowlist-only: it gets recipient_policy allowlist, content_policy enforce and a one-time owner key; a requested open policy is not honoured, and owner_key:false or content_policy:observe is refused with 400. Each mailbox can add at most five extra addresses in total (deleted aliases still count) and two per day, and the service allows 200 per day; past a cap, POST /v1/agent-mail/aliases answers 429 ALIAS_LIMIT_REACHED (the lifetime cap, no Retry-After) or ALIAS_RATE_LIMITED (a daily cap, with Retry-After). Publication does not prove creator enrollment or current route availability. Check current response and limits before use.