oz0 tenant mail-outside

Off by default: agents' mail goes only to the tenant's own mail domains.

For: Operators and developers looking up a command.

Off by default: agents' mail goes only to the tenant's own mail domains. On lets it go to any domain, such as customers' and suppliers'. Turning it on loosens a governance control: it takes --reason and, in a tenant with four eyes on, waits for another admin. Whether and when a tenant may mail people outside its own organisation (for example under marketing law) is the tenant's to decide; this switch decides nothing about it. Each change is audited (tenant.mail_outside).

Usage

oz0 tenant mail-outside <tenant> on|off [flags]

Flags

FlagTypeDefaultDescription
--decision-refstringthe decision or case the change follows, such as a case number (at most 200 characters)
--jsonboolprint JSON instead of a table
--reasonstringwhy, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026