| Inbox trigger disabled with “Endpoint not configured” | No connector URL/token in workspace settings | Settings → Integrations → gb-agent; confirm Vault secret exists |
| Inbox trigger disabled with “Endpoint unsafe” | Configured URL is not https or contains userinfo/query/fragment | Replace with clean https URL; the UI mapper rejects unsafe URLs deliberately |
| ”Draft already queued” on every attempt | A pending draft from the connector exists in message_drafts | Resolve the existing draft (Accept/Edit/Reject) or run release_stuck_outbox_jobs if it is leased and stuck |
| Operator reports the handoff preview card is missing | Feature flag inbox.gbAgentHandoffPreview is OFF | Set NEXT_PUBLIC_FLAG_INBOX_GB_AGENT_HANDOFF_PREVIEW=1 on apps/app Vercel project; redeploy |
| Operator reports an action they did not click was taken | Should never happen — the connector is dry-run-only | File as a bug; check responder_runs.metadata.policyDecisions for requiresHumanApproval: true and externalSendQueued: false |