Most mail tools either mirror forever or delete blindly. GiraffeMail archives RFC 822 locally first, verifies every blob with SHA-256, then lets you run filtered cleanup jobs. Built-in SQLite FTS5 search - no Elasticsearch. Single Go binary with embedded UI. Docker-ready. RBAC for teams. The golden rule is enforced in code: a message is deleted from IMAP only after it’s archived and checksum-verified. v0.1.0 is live on GitHub.