The attachment question: documents, photos, and the danger layer

The attachment is email's cargo hold — and every householder runs a dockyard without noticing. Monday brings the school's permission slip, Tuesday the insurance PDF, Wednesday an invoice you were not expecting from a sender you half-recognize. Two of those need filing; one needs to never be opened. The difference between a household that handles this cargo layer well and one that improvises it weekly is measured twice: once in the emergency that a filed document defuses, and once in the emergency that an opened attachment causes.

The danger layer, plainly

Attachments remain the number-one way trouble enters a mailbox, because an attachment is a request to run something dressed as a request to read something. The household rules, short enough to teach:

1. Expected beats familiar. The question is never only "do I know the sender?" — compromised accounts mail their whole address book. The question is "was I expecting this?" The unexpected invoice from the known contact is the classic costume, sibling to every script in the recognition guide.
2. Documents read; programs run. A PDF or photo opens to be looked at; anything that wants to install, enable, or "update your viewer" is not a document — it is the payload. On a storeless architecture this rule has teeth the open world lacks: there is no side-door installer for the payload to invoke, one of the quiet securities of the whole secured-device model.
3. The mystery attachment gets the callback, not the click. Same discipline as bank details: verify by a channel you already had. "Did you send me something?" costs thirty seconds and has saved uncountable machines.
4. The child's inbox receives attachments from its allowlist only — the designed first inbox admits the school's forms and the family's photos, and the question never arises. Architecture, again, doing what rules alone cannot.

“An attachment is a package at the door. Documents get opened; anything that asks to come inside and rearrange the furniture gets the callback.”

kolbo.life

The filing half: from inbox to shelf

The safe attachment still has a journey to finish — because the inbox is a terrible filing cabinet. The document that lives only inside a three-year-old email thread is functionally lost: findable by archaeology, not by lookup. The pattern that works is one habit long:

Everything worth keeping gets filed on arrival — out of the mail, into the family's document shelf, named like a human will search for it (`Teudas-Leida-Rivky.pdf`, `Camp-Form-2026-signed.pdf`). The shelf itself is the household's one organized place for papers-that-matter — the architecture treated in the KolBo Cloud pattern — with the family's photo traffic flowing instead to the gallery's local-first home. Ten seconds per document, filed the day it lands; the dividend arrives at every school registration, insurance claim, and passport renewal for a decade, per the same file-it-once philosophy as the civic lane's document discipline.

Sending has its own etiquette. The frum household mails documents constantly — to the school, the chosson's side, the accountant — and three courtesies mark the households that do it well: PDFs for anything final (they arrive as sent, on every device), sensible names before sending (the recipient files what you called it), and the shidduch-season rule that discretion-sensitive documents travel by agreement — the right channel, confirmed recipient, per the discretion norms of the shidduch-inbox conversation.

Frequently asked questions