“Reversible” means something different for each action
Archive is a label change: remove Inbox, then add it back. Later is two label changes: remove Inbox and add DeclutrMail/Later, then invert both. Delete moves email to Gmail Trash, where Gmail supplies a temporary recovery period. Keep and Protected are sender settings that can be changed again.
Unsubscribe is categorically different. Once a standards request or a user-sent mailto message reaches another organization, DeclutrMail cannot pull it back. A user may subscribe again later, but that is a new request rather than an inverse operation.
Putting all five under one “Everything is undoable” message makes the easiest promise win over the actual system. A trustworthy interface names the recovery mechanism beside the action.
A preview answers questions that undo cannot
Undo can reverse a supported operation after it runs. It cannot tell the user beforehand whether the selected sender was correct, whether the count includes years of email, whether future messages are affected, or whether an external request will be delivered.
A useful preview states what changes, what does not change, which email is affected, and how recovery works. For Unsubscribe it should say that existing email stays put and the delivered request is one-way. For manual Archive it should say that future messages may still arrive.
The preview is therefore not decorative friction. It is the place where the product makes its model inspectable before consequences begin.
A good Activity history supports accurate Undo
A generic “move back” command is not enough. An email may already have labels, may already be outside Inbox, or may change again after the cleanup action. DeclutrMail must remember the exact Gmail label changes for that mailbox so a retry does not repeat or compound them.
DeclutrMail stores Gmail message IDs and label changes rather than a duplicate email body. Activity shows Undo while recovery is available. Triage also shows recent actions, but Activity remains the dependable place to review results and start recovery.
The deadline should be visible. Every plan offers Undo for 30 days. Gmail Trash can end recovery earlier if the user empties it or permanently deletes an email.
Batch size changes the cost of a mistake
The same correct action can carry different risk for one sender and one thousand senders. Bulk tools should preview the total count, show failures for each sender, keep the batch together in Activity, and avoid showing success before the work finishes.
A small first batch is still the best operational control. It tests sender identity, Gmail behavior, recovery, and the user’s interpretation of the preview before the largest selection runs.
Speed should come from eliminating repeated confirmation once the workflow is understood, not from hiding the affected email on the first irreversible decision.
Automation needs observation in addition to undo
A manual mistake affects one reviewed set. An active rule can repeat the mistake every time the condition matches. Undoing yesterday’s messages does not correct tomorrow’s rule unless the automation state is also paused or changed.
DeclutrMail’s presets show what they would do before you turn them on. Choose Watch first and matches collect without moving email, for your approval. Either way you review the matching email and deliberately turn the rule on. The safety model is not “the rule is fine because actions can be undone”; it is “the user saw representative matches before the rule began and can still review each result.”
Unsubscribe automation deserves extra caution because delivered requests have no inverse. Protected senders are excluded before recommendations so known exceptions do not enter the automation path.
Trust comes from specific claims
“Recoverable for 30 days from Activity,” “restorable from Gmail Trash for up to thirty days,” and “cannot be undone after delivery” are less elegant than one universal promise. They are also useful when something goes wrong.
The standard for a cleanup product should be that every action names the affected email and gives an honest recovery statement, including when recovery is unavailable. Reversibility then becomes a real product property instead of a marketing adjective.