Skip to main content
Every email leaves through one sender that keeps a ledger and checks the address first; only allowed addresses are delivered to as written, and everything else goes to the owner instead. The rule is on Email safety. The engine sends no alert email of its own: a problem the monitor finds becomes a condition on Sentry, and Sentry does the mailing. Times are Ottawa time; the engine’s timers run in UTC, four hours ahead of Ottawa in summer.

When an email is skipped

Each sender re-reads the record when it runs and declines when the email no longer makes sense. A decline is written to the integration ledger with the reason, and some declines raise a human-review flag. The two appointment emails carry a signed link that downloads a calendar file for the visit: the day, the start of the arrival window, the window’s length, the property’s address, and the job’s lines. The link works for 30 days or until the day after the visit, whichever is later. A link whose signature does not match is refused.