> Specifically, the mail system should use the MAIL TO header in the envelope
> (it DOES contain the address for the specific recipient) rather than the
> internal To: header to route mail.
 
You are right, except that you mean the SMTP RCPT TO command.  It and
MAIL FROM are SMTP commands, sent from one SMTP server to another,
rather than headers.