Why does /audit return in ~3 seconds?

We read DNS and key email header fields only, use parallel resolvers with 2s timeouts, and return structured results with suggestions.

What is Proof‑of‑Scan?

We hash canonical JSON (sha256) and provide a Verify endpoint to recompute via multiple public DNS resolvers and compare hashes.

Do you store email bodies?

No. We never store bodies. We parse headers only, delete .eml right after parsing, and keep PDF/JSON for evidence.

Headers missing after template switch — quick checks

Template or pipeline refactors frequently drop critical headers (List‑Unsubscribe, From, DKIM header canonicalization). Bake header validation into staging and the first 24h after go‑live.

Validate

Check From domain and DMARC alignment
Ensure DKIM canonicalization still matches the new template (avoid extra whitespace in signed fields)
Verify List‑Unsubscribe and One‑Click for bulk sends
Add a staging gate that parses AR and asserts headers exist

Headers missing after template switch — quick checks

Validate

Next steps