HVEL - Attest Approved Email Layer, built by Bonthapally Sanjay kumar, aims to restore trust in inboxes by flagging message provenance. The extension operates inside Gmail and Outlook Webmail to surface real-time origin signals and composition labels. It pairs passive human-verification metadata with cryptographic attestation and tamper alerts to reduce uncertainty about sender identity. The tool targets security-conscious individuals and organizations that require machine-verifiable evidence to combat AI-driven phishing and impersonation.

Signals authorship inline, separating human, AI-assisted, and automated mail

The extension inserts a visible provenance indicator into messages so recipients can see whether an item is marked as human, AI-assisted, or automated, a capability described as its core purpose. That label appears in Gmail and Outlook Webmail when the extension is active in Chrome, giving recipients an immediate cue to treat messages differently during triage and when deciding whether to follow links or attachments.

Verification runs passively to limit user friction during composition

HVEL uses passive behavioral analysis rather than active challenges, which avoids interrupting senders with tasks like captchas, and performs verification in real time as mail is composed or received. Because verification is based on behavioral signals and metadata, the extension integrates with webmail flows without adding manual steps for senders, a design intended to keep normal email workflows intact while adding provenance signals.

Attestation and alerts focus on metadata and tamper resistance

The tool issues cryptographic attestation to make verification tamper-resistant and sends security alerts when messages change after verification. The extension's privacy-first design attests only to metadata, not email content, which preserves message confidentiality while still providing verifiable evidence about origin. Key outcomes include metadata-only attestations and post-verification alteration notices:

• Cryptographic proof to bind verification to a message
• Real-time alerts when attested messages are modified
• Metadata-only attestations, not content collection

Practical for organizations adopting metadata-based verification workflows

HVEL suits teams prepared to treat verification metadata as part of an authentication policy, since it attests only to metadata and provides tamper alerts. Administrators should plan a short interpretation policy so staff know how to respond to different provenance signals. Expect the workflow change to shift some investigation steps from manual inspection to metadata review, a trade-off that rewards formalized handling of suspicious mail.