diff --git a/README.md b/README.md index 1ed6842..48a8af7 100644 --- a/README.md +++ b/README.md @@ -94,7 +94,7 @@ Platform RBAC and governance rules are documented in `govoplan-core/docs/`. - [Campaign handbook](docs/CAMPAIGN_HANDBOOK.md) provides the adaptive user, process, governance, technical, and operations perspectives. - [Campaign delivery runbook](docs/CAMPAIGN_DELIVERY_RUNBOOK.md) covers queueing, local vs Celery operation, retries, reconciliation, reports, and the live SMTP/IMAP test checklist. - Immediate delivery is bounded to 25 exact eligible recipient jobs by default. Deployments may set `GOVOPLAN_CAMPAIGN_SYNCHRONOUS_SEND_MAX_RECIPIENTS` (0–500), and tenants may narrow that ceiling through `campaign_delivery_policy.synchronous_send_max_recipients` in tenant settings. -- Report-email preview uses the selected version's stored v5 Mail-profile evidence. Live report email fails closed until [govoplan-mail#17](https://git.add-ideas.de/add-ideas/govoplan-mail/issues/17) provides a durable, idempotent Mail-owned outbox and transport-attempt ledger; per-job CSV is off by default and requires `campaigns:recipient:export` when requested. +- Report-email preview uses the selected version's stored v5 Mail-profile evidence. Live report email fails closed until [govoplan-mail#17](https://git.add-ideas.de/GovOPlaN/govoplan-mail/issues/17) provides a durable, idempotent Mail-owned outbox and transport-attempt ledger; per-job CSV is off by default and requires `campaigns:recipient:export` when requested. - [Campaign/Mail profile boundary](docs/MAIL_PROFILE_BOUNDARY.md) defines profile-only delivery, runtime resolution, execution evidence, and the fail-closed legacy migration path. - [Recipient import guide](docs/RECIPIENT_IMPORT_GUIDE.md) covers user/admin workflows, mapping profiles, validation, and import evidence. - [Recipient and address boundary](docs/RECIPIENT_ADDRESS_BOUNDARY.md) defines the split between campaign-local recipients and future reusable address management. diff --git a/docs/CAMPAIGN_HANDBOOK.md b/docs/CAMPAIGN_HANDBOOK.md index 6a0fc7b..e1646ce 100644 --- a/docs/CAMPAIGN_HANDBOOK.md +++ b/docs/CAMPAIGN_HANDBOOK.md @@ -469,7 +469,7 @@ the current baseline: - the final audited **test / single send / single resend** semantics; - reusable SMTP batch sessions and their measured throughput benefit; - durable, idempotent Campaign report delivery through a Mail-owned outbox - ([`govoplan-mail#17`](https://git.add-ideas.de/add-ideas/govoplan-mail/issues/17)); + ([`govoplan-mail#17`](https://git.add-ideas.de/GovOPlaN/govoplan-mail/issues/17)); - a fully packaged one-command Campaign reference composition with production policy presets and target-provider certification; - function-bound Postbox delivery (stage 2 of the reference program); diff --git a/docs/MAIL_PROFILE_BOUNDARY.md b/docs/MAIL_PROFILE_BOUNDARY.md index ef0858e..4ad009b 100644 --- a/docs/MAIL_PROFILE_BOUNDARY.md +++ b/docs/MAIL_PROFILE_BOUNDARY.md @@ -49,7 +49,7 @@ Non-dry Campaign report email currently fails closed. It must not bypass the durable job/effect model through a direct SMTP call. Re-enabling it requires the Mail-owned idempotent outbox, attempt, unknown-outcome, and reconciliation path tracked in -[`govoplan-mail#17`](https://git.add-ideas.de/add-ideas/govoplan-mail/issues/17). +[`govoplan-mail#17`](https://git.add-ideas.de/GovOPlaN/govoplan-mail/issues/17). Report generation and dry-run validation remain separate from an external effect; recipient-level exports require recipient-export authorization.