# allowlist.jsonc

> **Owned by rmfmail. Do not edit this file — your changes will be overwritten the next time the app starts.** This is reference documentation. To change allow-list data, edit `allowlist.jsonc` itself.

## What this file documents

`allowlist.jsonc` controls which senders' remote content (images, etc.) loads automatically and which senders/domains are flagged with a ⚠ banner. Lives in `My Drive/home/.rmfmail/`.

## Shape

```jsonc
{
  "senders": ["alice@example.com"],         // load remote content for these senders
  "domains": ["example.com"],                // load remote content for any sender at these domains
  "recipients": ["you@example.com"],         // addresses you receive at — treated as "your inbox identity"
  "flaggedSenders": ["spam@bad.com"],        // viewer shows ⚠ FLAGGED banner for these senders
  "flaggedDomains": ["phishing.example"]     // viewer shows ⚠ FLAGGED banner for any sender at these domains
}
```

## Notes

- All entries are case-insensitive plain email or domain strings.
- Multi-client safe: each device's save merges with the cloud copy (set-union), so adds from any device propagate.
- Use the message viewer's "allow remote content" button to add a sender/domain to `senders`/`domains` interactively.
- Use the right-click menu in the viewer to flag a sender/domain — adds to `flaggedSenders`/`flaggedDomains`.
- JSONC: `// line comments` and trailing commas are allowed.
