[ymote]

Two ADR 0004 follow-ups.

1. A contacts source for the approval rules

"Recipients in my contacts" never matched: the shell had no contacts source.

• crates/shell/src/approvals/contacts.rs: ContactsSource (is_known(address) for email addresses and Matrix IDs), with ContactList / NoContacts as test doubles; MailContacts, which reads Mail's host service data; and ContactsGate, which is what the router asks. The gate is off by default. It turns on only when the person taps "Use my contacts in approval rules" in Settings → Assistant → Approvals (an ApprovalGesture, following the consent.rs pattern), and turning it off needs no gesture. The choice is stored owner-only in approvals/contacts.json. The old rules::Contacts trait is replaced.
• apps/mail/host-service/src/contacts.rs: known_addresses(host_dir) returns the person's own account addresses plus the addresses they have sent mail to. Those come from the recipients this service sent for them (mail/sent-to.json, per account) and from the To/Cc of messages in each account's sent folder. It reads only accounts.json, folders-<id>.json, the sent-folder mailboxes and sent-to.json, never the vault. The decoder now keeps to and cc, and removing an account forgets its recipients.
• The shell links MailContacts where Mail's host service is linked (App Hub or native mobile) and falls back to NoContacts otherwise.
• Tests: a rule matches a known recipient (email address and Matrix ID) and rejects an unknown one; it never matches without consent, and turning consent off stops it matching again; the sheet offers no "always for people in my contacts" without consent; the choice persists per home, owner-only; the mail side builds the known set from the sent folder and recorded sends, ignores senders in the inbox and junk, and holds no password.

Follow-up: OS address books (macOS Contacts, Android contacts provider) as further ContactsSources.

2. docs/ai-services.md and .zh-CN.md refreshed

These pages were dated 2026-09-27; they now describe main as of 2026-09-28 (ad0d738, octos 5e7577f0, App Hub e8601b80). Changes:

• The Card runner's octos service (ai-host: the octos host service for contained apps (Card runner) #106), with consent (ADR 0004 §8/§4: approval router, standing rules, shell sheets, first-use consent #120). The contained-apps switch is still off by default.
• model is registered (model: one-shot model calls for contained apps (model.complete) #95); the glance capability has landed (glance: contained apps publish with the glance capability, not by being os.* #86).
• The approval router, developer mode and the system agent's tool set (ADR 0004 §8/§4: approval router, standing rules, shell sheets, first-use consent #120, Developer mode, turned on only by the person (ADR 0004 §13) #118, The system agent's defined tool set, no shell (ADR 0004 §12) #117), and native-apps.json (Terminal as a system app and native-apps.json: one manifest, hosting per target (ADR 0004 steps 1–2, §10) #113). Each links to architecture.md (docs: architecture overview (processes, agents, protocols, approvals) [skip ci] #124) instead of repeating it.
• In progress, with links: octos#2567 (draft), glance: resolve sys.digest sources from host-held digests (ADR 0002 M4) #87, toolbox-peers: offer the system toolbox to app agents (ADR 0002 §6, behind a feature) #108. The peer link is marked planned (plan step 8); its Makepad client side (ai-services: the peer link client (OctoSense ADR 0004 §5) makepad#54) is merged.
• Existing anchors are kept. architecture(.zh-CN).md: the "no contacts source" lines and the stale-ai-services entry are updated.

Checks (local)

• cargo test --locked -p octosense-shell --lib approvals: desktop and --features mobile-apps (38 passed each)
• cargo test --locked -p octosense-mail-service (8 passed)
• cargo check --locked -p octosense (with and without mobile-apps); from phone/: cargo check --locked -p octosense-home --features mobile-apps
• tools/check-shell-graph.sh -p octosense and -p octosense-home
• python3 tools/setup.py --check --cargo
• Relative-link and anchor check on the four changed docs

🤖 Generated with Claude Code