A triage bot that clears routine mail and leaves the rest · Gmail Bot devlog

Gmail Bot reads every unread message and sorts it into one of seven buckets: personal, security-sensitive, action-required, financial statement, transactional, newsletter/marketing, or uncertain. Routine buckets get marked read; everything else stays unread for a person.
It also acts as a light security layer: it flags spoofed display names, lookalike domains, failed SPF/DKIM/DMARC checks, sign-in codes nobody asked for, "urgent wire transfer" scams and risky attachments such as invoice.pdf.exe.
Safe by design: dry-run is the default, nothing is ever permanently deleted, it never sends or replies, trash and spam are only suggested, and unsubscribing only ever uses the sender's official unsubscribe header. Every action, real or previewed, goes to an audit log.
Each run ends with a digest: what was cleared, what was left and why, action items and deadlines, unsubscribe options, and upcoming renewals. The shots show a run over an invented demo inbox.