Outlook Classic 0.1.0-alpha.4.ci.7.1

Classic Outlook mail MCP alpha for Windows 11 x64, packaged as Agent Plugins v1.

OCI artifact: ghcr.io/obscuritylabs/colossus-plugin-outlook-classic@sha256:e95973e1eb55062d92d8c8810788d142cf62ac94bc7f0b3d5bf49f70e9b5342a

Runs beside classic Outlook in the same logged-in user session. Includes 14 bounded tools for mail listing, reading, read-state changes, same-store move/archive, move to Deleted Items, and unsent draft creation/update. No mail sending, permanent deletion, or attachment downloads. New Outlook is outside scope.

The OCI manifest and checksums are signed with this repository's GitHub Actions identity. CI built the self-contained Windows package, exercised component/MCP/catalog checks, and verified the signed artifact after pulling it from GHCR with Colossus 0.11.4. The Windows EXE is not Authenticode-signed.

Publication required passing local live Outlook evidence matching these sources. The attached outlook-classic-live.json records 24 checks against two synthetic PSTs, synthetic-only writes, and bounded real Inbox reads; no personal message content is included. CI rebuilds the tested sources with this preview version; the local report identifies the separately tested local runtime.

Known alpha limits: Colossus 0.11.4 rejects its injected plugin environment variables, blocking automatic plugin MCP discovery. The installation guide describes explicit operator MCP registration as a separate route. Direct COM attachment does not work inside the tested Colossus windows_job/AppContainer boundary. Hosted CI does not exercise a real mailbox. Full mailbox/Office compatibility remains unvalidated. Do not disable isolation as an installation workaround.

See installation and verification. Keep every file in the portable ZIP together. The OCI archive includes the plugin and its signing evidence for disconnected verification.

Outlook Classic 0.1.0-alpha.4.ci.5.1

Classic Outlook mail MCP alpha for Windows 11 x64, packaged as Agent Plugins v1.

OCI artifact: ghcr.io/obscuritylabs/colossus-plugin-outlook-classic@sha256:5ef90c61498bba94fcb3e6b61cfefb09473ab58af05abf133b5ff3aab758b310

Runs beside classic Outlook in the same logged-in user session. Includes 14 bounded tools for mail listing, reading, read-state changes, same-store move/archive, move to Deleted Items, and unsent draft creation/update. No mail sending, permanent deletion, or attachment downloads. New Outlook is outside scope.

The OCI manifest and checksums are signed with this repository's GitHub Actions identity. CI built the self-contained Windows package, exercised component/MCP/catalog checks, and verified the signed artifact after pulling it from GHCR with Colossus 0.11.4. The Windows EXE is not Authenticode-signed.

Publication required passing local live Outlook evidence matching these sources. The attached outlook-classic-live.json records 24 checks against two synthetic PSTs, synthetic-only writes, and bounded real Inbox reads; no personal message content is included. CI rebuilds the tested sources with this preview version; the local report identifies the separately tested local runtime.

Known alpha limits: Colossus 0.11.4 rejects its injected plugin environment variables, blocking automatic plugin MCP discovery. The installation guide describes explicit operator MCP registration as a separate route. Direct COM attachment does not work inside the tested Colossus windows_job/AppContainer boundary. Hosted CI does not exercise a real mailbox. Full mailbox/Office compatibility remains unvalidated. Do not disable isolation as an installation workaround.

See installation and verification. Keep every file in the portable ZIP together. The OCI archive includes the plugin and its signing evidence for disconnected verification.

Outlook Classic 0.1.0-alpha.4.ci.4.1

Classic Outlook mail MCP alpha for Windows 11 x64, packaged as Agent Plugins v1.

OCI artifact: ghcr.io/obscuritylabs/colossus-plugin-outlook-classic@sha256:52dfec316ec54ca8f13fd6006504ed2364ba59f97626eef86449f71ddd396cf7

Runs beside classic Outlook in the same logged-in user session. Includes 14 bounded tools for mail listing, reading, read-state changes, same-store move/archive, move to Deleted Items, and unsent draft creation/update. No mail sending, permanent deletion, or attachment downloads. New Outlook is outside scope.

The OCI manifest and checksums are signed with this repository's GitHub Actions identity. CI built the self-contained Windows package, exercised component/MCP/catalog checks, and verified the signed artifact after pulling it from GHCR with Colossus 0.11.4. The Windows EXE is not Authenticode-signed.

Publication required passing local live Outlook evidence matching these sources. The attached outlook-classic-live.json records 24 checks against two synthetic PSTs, synthetic-only writes, and bounded real Inbox reads; no personal message content is included. CI rebuilds the tested sources with this preview version; the local report identifies the separately tested local runtime.

Known alpha limits: Colossus 0.11.4 rejects its injected plugin environment variables, blocking automatic plugin MCP discovery. The installation guide describes explicit operator MCP registration as a separate route. Direct COM attachment does not work inside the tested Colossus windows_job/AppContainer boundary. Hosted CI does not exercise a real mailbox. Full mailbox/Office compatibility remains unvalidated. Do not disable isolation as an installation workaround.

See installation and verification. Keep every file in the portable ZIP together. The OCI archive includes the plugin and its signing evidence for disconnected verification.

Outlook Classic 0.1.0-alpha.3.ci.3.1

Read-only classic Outlook MCP alpha for Windows 11 x64, packaged as Agent Plugins v1.

OCI artifact: ghcr.io/obscuritylabs/colossus-plugin-outlook-classic@sha256:6ca3c7a1e753e39c85b1345feda29cac368137a67918b03fed31a8300059bced

Runs beside classic Outlook in the same logged-in user session. Includes six bounded read-only tools; no mail sending, editing, or attachment downloads. New Outlook is outside scope.

The OCI manifest and checksums are signed with this repository's GitHub Actions identity. CI built the self-contained Windows package, exercised component/MCP/catalog checks, and verified the signed artifact after pulling it from GHCR with Colossus 0.11.4. The Windows EXE is not Authenticode-signed.

Publication required passing local live Outlook evidence matching these sources. The attached outlook-classic-live.json records 18 checks against two synthetic PSTs and bounded real Inbox reads; no personal message content is included. CI rebuilds the tested sources with this preview version; the local report identifies the separately tested local runtime.

Known alpha limits: Colossus 0.11.4 rejects its injected plugin environment variables, blocking automatic plugin MCP discovery. The installation guide describes explicit operator MCP registration as a separate route. Direct COM attachment does not work inside the tested Colossus windows_job/AppContainer boundary. Hosted CI does not exercise a real mailbox. Full mailbox/Office compatibility remains unvalidated. Do not disable isolation as an installation workaround.

See installation and verification. Keep every file in the portable ZIP together. The OCI archive includes the plugin and its signing evidence for disconnected verification.

Local Colossus agent acceptance (2026-10-01)

The exact signed alpha.3 artifact was anonymously pulled from GHCR, verified and installed by Colossus 0.11.4, and exercised by a real gpt-6-luna agent on this Windows/classic Outlook machine. The portable ZIP's complete runtime matched the signed installed OCI runtime byte for byte.

With the installed outlook-classic/mail skill selected and explicit operator MCP registration pointing to that installed binary, all six Outlook tools passed: eight calls with no errors. The agent tested synthetic-store/folder discovery, apostrophe and Unicode subject search, bounded body reads, two pages of attachment metadata, and unread-state preservation. Independent COM checks confirmed unchanged fixture counts, bodies, unread flags, and modification times. The test PST was detached afterward and the Colossus audit chain verified. The run used the existing same-user danger_full_access execution mode; it does not establish AppContainer support.

Alpha.3 replaces long base64 handles with compact stateless handles and copy-error detection, addressing the handle-copying failure found in the alpha.2 agent test.

Automatic plugin MCP discovery was separately retested against this exact release and still failed with mcp_configuration_unavailable: Colossus 0.11.4 rejects the reserved environment variables it injects itself. The successful explicit-registration test does not mean automatic plugin registration works.

The attached outlook-classic-agent-test.json contains sanitized post-publication evidence, artifact/runtime hashes, run IDs, tool outcomes, and both registration results. It contains no personal mail content, mailbox identifiers, or raw transcript. This supplemental report was uploaded after CI and is not part of the original signed SHA256SUMS; the original signed assets are unchanged.

Outlook Classic 0.1.0-alpha.2.ci.2.1

Read-only classic Outlook MCP alpha for Windows 11 x64, packaged as Agent Plugins v1.

OCI artifact: ghcr.io/obscuritylabs/colossus-plugin-outlook-classic@sha256:40cf49358b4b33d45dec60567fadd1676dcfcf9a08a37ef369f03e2acfb49f1c

Runs beside classic Outlook in the same logged-in user session. Includes six bounded read-only tools; no mail sending, editing, or attachment downloads. New Outlook is outside scope.

The OCI manifest and checksums are signed with this repository's GitHub Actions identity. CI built the self-contained Windows package, exercised component/MCP/catalog checks, and verified the signed artifact after pulling it from GHCR with Colossus 0.11.4. The Windows EXE is not Authenticode-signed.

Publication required passing local live Outlook evidence matching these sources. The attached outlook-classic-live.json records 18 checks against two synthetic PSTs and bounded real Inbox reads; no personal message content is included. CI rebuilds the tested sources with this preview version; the local report identifies the separately tested local runtime.

Known alpha limits: direct COM attachment does not work inside the tested Colossus windows_job/AppContainer boundary. Hosted CI does not exercise a real mailbox. Full mailbox/Office compatibility remains unvalidated. Do not disable isolation as an installation workaround.

See installation and verification. Keep every file in the portable ZIP together. The OCI archive includes the plugin and its signing evidence for disconnected verification.

Local Colossus agent acceptance (2026-10-01)

The attached outlook-classic-agent-test.json records an incomplete alpha.2 real-agent test: four tools succeeded, but the model altered a long opaque message handle and get_message failed. Automatic plugin MCP discovery also failed because Colossus 0.11.4 rejects its own injected plugin environment variables. Independent fixture checks and cleanup passed.

Use the newer alpha.3 preview for compact stateless handles with copy-error detection; its real-agent test passed all six tools through explicit operator MCP registration. The host's automatic-discovery defect remains documented in that release.

This sanitized report is supplemental post-publication evidence and is not part of the original signed SHA256SUMS. Original signed assets are unchanged.

Outlook Classic 0.1.0-alpha.1.ci.1.1

Read-only classic Outlook MCP alpha for Windows 11 x64, packaged as Agent Plugins v1.

OCI artifact: ghcr.io/obscuritylabs/colossus-plugin-outlook-classic@sha256:8a5325ed1cf5e1044f98fa9c1c5c227611ca1fd2601b4d998f33435a04316b9f

Runs beside classic Outlook in the same logged-in user session. Includes six bounded read-only tools; no mail sending, editing, or attachment downloads. New Outlook is outside scope.

The OCI manifest and checksums are signed with this repository's GitHub Actions identity. CI built the self-contained Windows package, exercised component/MCP/catalog checks, and verified the signed artifact after pulling it from GHCR with Colossus 0.11.4. The Windows EXE is not Authenticode-signed.

Known alpha limits: direct COM attachment does not work inside the tested Colossus windows_job/AppContainer boundary. Hosted CI does not exercise a real mailbox. Full mailbox/Office compatibility remains unvalidated. Do not disable isolation as an installation workaround.

See installation and verification. Keep every file in the portable ZIP together. The OCI archive includes the plugin and its signing evidence for disconnected verification.