SnappyMail OpenPGP Architecture Audit

This document describes what the SnappyMail OpenPGP work is supposed to do, what the current implementation actually does, and where it is still off target. It is intentionally written as an audit map rather than a success claim. The goal is to make every moving part inspectable: key lifecycle, public key discovery, send-time encryption, received-message decryption, signature verification, UI status, logging, and public WKD publication.

The target product is simple: a user logs into webmail with the mailbox password, the server has or creates the mailbox GnuPG key, outgoing mail discovers recipient public keys from WKD, internal managed mail signs and encrypts automatically, encrypted sent mail remains readable by the sender, incoming encrypted mail decrypts without a browser modal, and the message view never claims decryption or signature verification unless that result is actually true.