- Assert memory recipients, HTML safety, and SMTP TLS without credential leaks - Prove real SMTP delivery through Mailpit HTTP API when Docker is available - Add scripts/check-phase4.sh as the phase vet, test, race, and SMTP gate Co-authored-by: Cursor <cursoragent@cursor.com>