Before sending any system-generated email (quote acceptance, rollover, termination notices, approvals, reminders):
Users must be able to:
Edit subject, body, and attachments
View merged field outputs
See which fields must not be removed (e.g., signed URLs, OTP tokens)
Save the final sent version to the audit history
Make per-send customisations without changing master templates