ADR 0003 — Dangerous flags default off

Status

Accepted

Context

MVP must not send or delete mail. MAIL-70 requires ENABLE_SEND to stay false until an explicit later release.

Decision

Parse ENABLE_SEND and ENABLE_DELETE as true only when the environment value is exactly true. All other values, including unset, 1, yes, and TRUE, remain false.

Consequences

CI and unit tests lock the default. Enabling send later is an intentional environment change, not an accident of truthy parsing.