Why does /audit return in ~3 seconds?

We read DNS and key email header fields only, use parallel resolvers with 2s timeouts, and return structured results with suggestions.

What is Proof‑of‑Scan?

We hash canonical JSON (sha256) and provide a Verify endpoint to recompute via multiple public DNS resolvers and compare hashes.

Do you store email bodies?

No. We never store bodies. We parse headers only, delete .eml right after parsing, and keep PDF/JSON for evidence.

DMARC policy: none → quarantine → reject — staging plan

Stage DMARC to protect deliverability while moving toward enforcement. This plan balances safety and speed by fixing alignment sources first and then raising policy.

Verify

Start with p=none, collect rua reports
Fix sources failing alignment; validate with audit & PDF evidence
Move to p=quarantine, then p=reject

DMARC policy: none → quarantine → reject — staging plan

Verify

Next steps