also looking at this

Harden encrypted mail storage, recovery, and forwarding

Merged chris wants to merge codex/mail-storage-hardening into main

50 files +1701 -9001

Review threads live on the whole diff, not on one commit, so none are shown here - a thread's line means something in the branch's final form, and painting it into an intermediate step would put it on code it is not about.

packages/zig/build.zig.zonmodified+2-2

Changes to packages/zig/build.zig.zon
		@@ -35,8 +35,8 @@
35	35	.tls = .{
36	36	// Keep TLS sourced from the canonical zig-utils/zig-tls repository
37	37	// instead of carrying a divergent snapshot under vendor/.
38		.url = "git+https://github.com/zig-utils/zig-tls.git#42f4ea2398868c6a1d45b99a2b1a518e13fb10f2",
39		.hash = "zig_tls-0.1.1-CwcE5Jb4JwAOOgutzm4ZFMftuFwc3Bjdfc6ceyQRSXuq",
	38	.url = "git+https://github.com/zig-utils/zig-tls.git#7701c14c89ca22dbc19577b2c53acc00ec0e1a6d",
	39	.hash = "zig_tls-0.1.1-CwcE5Jb4JwApYgi6y6WoRhwGAinXCwixFaVD1YSLCJxJ",
40	40	},
41	41	.search_engine = .{
42	42	.path = "vendor/zig-search-engine",