A daily 6:50am routine where the Chief of Staff agent scans John's two business inboxes, acts directly on everything agent-actionable, and surfaces only what needs human judgment. Results feed the Morning Brief's "Actions Taken For You" and "Actions For You" sections.
John explicitly set this. Escalation is the exception, not the default. When in doubt, agent acts conservatively and notes "Agent was unsure — your call" in the brief.
Verify the Gmail MCP session is authenticated against both business accounts. If only one is authed, either add delegation/OAuth for the second OR configure a Gmail forwarding rule (churchwiseai@gmail.com → john@churchwiseai.com) with headers preserved so the agent can distinguish origin.
Create the label taxonomy in each inbox (agent does this on first run if missing):
receipts/<YYYY-MM> — one per month
newsletter — marketing opt-in mail
gsc-reviewed — Google Search Console mail the agent has triaged
system-dup — internal-system mail duplicating WatchTower
Senders: any with noreply@, newsletter@, marketing@, known newsletter services (substack, beehiiv, mailchimp-sender patterns)
Subject patterns: no specific patterns — inferred from opt-in mailing-list headers
Actions:
Apply newsletter label
Archive
If John hasn't opted in (per List-Unsubscribe header + no prior interaction), draft unsubscribe
No escalation.
4. System duplicates → LABEL + ARCHIVE + FLAG SOURCE
Subject patterns: Stripe webhook notification emails, Supabase quota alerts, Vercel deploy emails (when CI already posts to founder dashboard)
Actions:
Apply system-dup label
Archive
Add a line to the weekly retrospective: "consider suppressing email since it duplicates WatchTower"
If Gmail MCP returns an error (auth expired, rate limit, transient), the brief's email-triage section shows ⚠ triage skipped: <reason>. Mail waits until the next successful run. The agent never silently drops mail — only delays triage.