A mailbox per workspace: verify before you parse
Mail the workspace and the lead answers in the thread. The inbound webhook verifies the raw body before parsing it, threading walks Message-ID then References then subject, and a stranger's mail becomes an ask instead of an agent turn.