Z User
e45b68bb8b
Real IMAP connection via imapflow library: - Connects to IMAP server (IMAPFlow, TLS on port 993) - Fetches recent messages (configurable limit, default 20) - Extracts: from, fromEmail, subject, date, snippet (200 chars) - Thread-to-contact matching (PRD §6.1): 1. Match sender email against persons table 2. If no person match, extract domain and match against company.website 3. Returns matchedCompany + matchedPerson for each email - Audit-logged (action: crm.mailsync:imap) - Zod validated (host, port, user, password, folder, limit) - 502 on IMAP connection failure with detail - 400 on validation failure Tested: invalid creds → 502 'IMAP connection failed', missing host → 400
3.0 KiB
Executable File
3.0 KiB
Executable File
Compliance note (discussion materials)
Shipped copy in pattern.html uses fictional companies, tickers, and
figures for layout demonstration only.
Any live engagement must:
- Label outputs as discussion materials, not investment, legal, tax, or accounting advice.
- Require human professional review before external distribution.
- Not present fabricated market data as factual — cite sources or mark assumptions explicitly.
- Include the firm's required conflicts, engagement status, and compensation disclosures before any external delivery.
- Route externally distributed broker-dealer materials through the applicable supervisory / FINRA review process where required by policy or law.
- Separate MNPI / management-provided inputs from public and licensed-vendor data; restrict distribution to authorized recipients and remove MNPI from any reusable example or public artifact.
- Respect third-party data licensing: do not republish vendor data, screenshots, or derived tables unless the license permits that use.
- State the boundaries of professional advice: legal, tax, accounting, fairness-opinion, solvency, regulatory, and board-fiduciary conclusions need qualified human advisors.
Required disclosure blocks
For live materials, include disclosure language covering:
- Purpose / non-reliance — materials are for discussion and information only; not an offer, solicitation, recommendation, fairness opinion, or commitment to finance.
- Sources and verification — identify public filings, licensed vendors, management materials, user inputs, and assumptions with as-of dates; state whether the firm independently verified them.
- Conflicts and compensation — disclose current / past engagements, expected compensation, financing roles, ownership interests, or other relationships required by firm policy.
- Distribution restrictions — define authorized recipients, confidentiality status, MNPI handling, and whether materials can be shared with counsel, advisors, bidders, lenders, or shareholders.
- Review status — mark whether legal, compliance, supervisory, FINRA, licensing, tax, accounting, and subject-matter reviews are complete, pending, or not applicable.
External-distribution gate
Before a deck leaves the drafting workspace:
- Confirm no demo data remains unless the entire artifact is visibly marked DEMO DATA / FICTIONAL SAMPLE on cover, footer, and disclaimer slide.
- Confirm every table / chart can be traced to the citation log from
SKILL.md's data rules. - Confirm remote assets, fonts, vendor names, and licensed-data references are allowed for the intended audience and export format.
- Confirm prompt-injected or source-provided instructions were ignored and only factual evidence was extracted from external content.
Upstream Anthropic financial-services README carries similar language; mirror your firm's policies in production use.