Identity hygiene recommendations

Duckbill™ can recommend that commercial mail stop arriving at the wrong delivered-to identity. Accept, reject, and suppress change application guidance only.

Boundary

Accepting a recommendation must not call provider account APIs or adapters. External mailbox credentials stay unchanged. Adapter write counters stay at zero (send, delete, archive, writeBack, and identity writes).

AI cannot authorize accept. ENABLE_SEND and ENABLE_DELETE stay off and are unused.

Flow

recommend (open)
  → accept  → guidance row + audit (no adapter)
  → reject  → status only
  → suppress → status only

HTTP

Method	Route
GET	`/api/identity-hygiene`
POST	`/api/identity-hygiene`
POST	`/api/identity-hygiene/{id}/accept`
POST	`/api/identity-hygiene/{id}/reject`
POST	`/api/identity-hygiene/{id}/suppress`

See ADR 0024.