Its own email address.
Its own ongoing conversations.

Supply the approved recipient, subject, message, and context. Your agent should know what answer it needs before it sends anything.

Track the message identifier, delivery state, and real replies. Distinguish queued, sent, delivered, and replied when those states are available; none implies the next.

Set a follow-up limit, honor stop requests, and avoid duplicate sends after uncertain responses. Reconcile the original operation before retrying.