A nice bit of technical detail on how to achieve a privacy-preserving implementation for email push. I hope many people would care about such details, though realistically I’m unsure of it. It’s one of those things that can be done quickly, easily, and poorly; or with a little more effort and attention, quite well.

This is one of the more interesting ideas I’ve come across in terms of securing agentic workloads.