⓪ Grounded new-message entry (2026-07-08). A discoverable ✎ new message affordance exists (not "hidden in People" only) — but it opens a recipient-first, grounded flow, never a blank editor: Who? (type to add people — multi-select autocomplete over your people; a raw address → new contact, minted on send; cc / bcc hidden by default, expand via the ⌄ chevron, Gmail-style) → Tell Pingbo what to send (its own Draft it → button) → it drafts → the composer (①). Recipients (to / cc / bcc) are picked once here, never re-picked downstream. Half-exit: never sends, never nags — a line draft persists on the line; an origination draft is a single slot ("Continue your draft to X?" on reopen; empty → discarded), no Drafts folder. Honors §353's "no blank compose" while staying intuitive.
① Composer = a sheet; the AI draft is fully editable; the in-editor guard is ambient, not a gate (✓ red-lines · ✓ commitments · ⚠ conflicts, each ↗) — you're never blind, but a clean draft sends on one tap. Swipe-to-send banned.
② Undo-send = a persistent bottom bar (Apple Mail's native iOS pattern, NOT a fading toast) — default 10s, settable 10/20/30/off. Durable timer: leaving / switching apps neither sends now nor cancels — it sends at T regardless, kill-app-safe. Line optimistically moves to Waiting; Undo brings the draft back.
③ A blocking double-confirm fires ONLY when the agent suspects a problem — unified across content-conflict (a ⚠ vs your case-file, e.g. Q7) and recipient-risk (new / external / not-in-thread / large / bcc). No doubt → one tap, no extra step.
④ No Outbox folder (email-client anti-pattern) — send-states live INLINE on the board: failed → the line returns to Needs-you (Retry, draft saved — the board catches it, never a folder you must check) · offline → thin banner + per-line · sending → line micro-state · sent → line advances.