The product's one guarantee that must not go is this: a send is a thing you approved, not a thing an assistant decided mid-sentence.
So the first tool writes a draft. The second delivers it. Everything in between is a draft.
What a draft is
draft_package stores the briefing against your account: who it is for, the topic, the structured fields, the note the assistant proposes. Nothing leaves. No email. No webhook. The other person does not have it.
whats_new will mention unsent drafts if you have any. list_drafts lists them. @relaylink and @rl open one; they never skip to send.
How it becomes a send
You approve it.
- In the conversation: the assistant calls
confirm_sendafter you have seen the wording. Leave the note alone and it is approved. Change it and — if the wording actually differs — it can carry the verbatim label. The assistant supplies both sides of that comparison, which is the honest limit of a protocol whose only channel is the assistant. - In the browser: Approvals. Same rule, stronger channel. The session came from an emailed code. The assistant does not hold it. Reviewing a draft there is how the verbatim label gets a producer that is not the party whose authorship is in question.
An emptied box on that page is refused, not treated as "approve unchanged." You deleted the wording.
Twenty-four hours
A draft that is still pending expires a day after it was made. After that, confirm_send will not find it. The assistant has to draft again.
That is why a lost id is annoying and not a ghost send. list_drafts is the recovery; cancel_draft is the tidy-up if you already know you will not send it.
Closing the account throws every pending draft away. Nobody is left to approve them.
What a draft is not
It is not a scheduled send. It is not a folder of letters you polish for a week. It is a held briefing with a short life, so an approval you never got to cannot sit forever next to a newer one you meant.
The compose form on your account does not use this path. You typed it; there is nothing to approve. That send is immediate, through the same consent gate.
If you asked an assistant to write and you have not seen the words yet, you have a draft. Look at it. Then send it, cancel it, or let the day run out.