Repository navigation
Core Concepts
BJD1997 edited this page Oct 2, 2026
·
4 revisions
The DMARC/SPF/DKIM rules YADT implements, and why it scores things the way it does.
- Multi-Tenancy & Row-Level Security (RLS) — how tenant isolation is enforced at the database layer.
- DMARC Subdomain Policy Inheritance — why a subdomain without its own record isn't automatically unprotected.
- How Reports Are Attributed to a Domain — matching report records to the right domain, not just the report's own.
-
SPF
~allvs-all: Conditional Mode — when a hard SPF fail stops being worth the risk. - Detected Domains: Finding Unregistered Senders — surfacing subdomains and DKIM selectors before they cause an incident, and the notifications bell that tells you about them.
- How DNS Checks Are Scheduled — the sweep cadence and why unverified domains are never auto-checked.
- Domain Rating: How the 0–100 Score Is Calculated — the weighted formula behind the single letter grade.
- Ask AI — the opt-in button that turns an issue into a question for an AI assistant, and what it shares.
← Back to the README · Live demo · Report an issue · MIT licensed
- Quick Start: Docker Compose
- Deploying with Portainer
- Deploying on Azure
- Configuration Reference
- Onboarding an Organization
- IMAP Mailbox
- Google Workspace Mailbox
- Sign-in Providers
- Multi-Tenancy & RLS
- DMARC Subdomain Inheritance
- Report Attribution
- SPF Conditional Mode
- Detected Domains
- DNS Check Scheduling
- Domain Rating
🏗️ Architecture
🗺️ Roadmap