- Stable identity, conversation, and exact events
- Use stable customer, representative, contact-point, case, conversation and message identifiers; preserve original inbound and outbound events and artifacts; isolate tenants; distinguish asserted and verified context; record merge and correction decisions; and prevent summaries from replacing exact communication evidence.
- Purpose, authority, preference, and suppression before composition
- Resolve purpose, jurisdiction and role first; require the applicable authority and consent where needed; apply objections, suppressions, subscriptions, preferences, frequency and quiet time; separate service from marketing; propagate changes across senders; and preserve an accessible, free and effective objection path where required.
- Current sources, approved content, and sensitive review
- Retrieve only permitted current records, version templates, clauses, terminology and locale, keep facts separate from generated wording, expose missing data and deviations, reject untrusted instructions, prohibit unsupported claims and require named approval for legal, financial, safety, complaint, vulnerable-customer and material commitments.
- Channel-specific validation and idempotent delivery
- Confirm sender and recipient, verified contact point, locale, accessible alternative, links, attachments, schedule, expiry, provider and credential scope; use idempotency and correlation; preserve queued, accepted, delivered, failed, bounced and expired states; and test retries without duplicate or contradictory contact.
- Usable opt-out, reply, complaint, and handoff paths
- Honor applicable objections and opt-outs, implement protocol controls such as one-click list unsubscribe only within their real scope, keep human help and complaints accessible, bind replies to the right thread, assign a named owner and backup, confirm handoff acceptance and escalate silence or failure.
- Reconciliation, correction, recovery, and stop authority
- Reconcile provider events with source-system state, reject unreliable engagement inference, reopen unowned outcomes, preserve correction and supersession history, find affected recipients, test provider outage and delayed events, export and restore evidence and give independent owners power to suppress, pause, roll back or retire a purpose or channel.