v1.10.68 – v1.10.69 — 2026-05-22

• fix(sandbox): hold-mode reinject fallback — if the :10027 hold-listener is temporarily unavailable (e.g. during a Postfix reload on deploy), sandbox-enqueue now falls back to pass-through delivery instead of returning EX_TEMPFAIL. The sandbox scan still runs asynchronously; mail is no longer stuck in deferred queue indefinitely.