DKIM2 v0.1.26

Commit Summary

Added

• Add: Qualify and document DSN propagation deployments (c894a4f)
• Add: Project received-DSN facts to dkim2ctl, the Milter, and Rspamd (1669d35)
• Add: Ship the MTA-neutral DSN propagation adapter (4d0d0f7)
• Add: Serve received-DSN evaluation and DSN propagation in dkim2d (12b69ee)
• Add: Rebuild and sign propagated delivery-status notifications (79ac7c2)
• Add: Evaluate received delivery-status notifications (02e1317)
• Add: CLAUDE.md to the repository (ce8509b)

Changed

• Change: Make the Rspamd received-DSN policy attribute opt-in (1b52ed5)

Fixed

• Fix: Satisfy the pinned goconst rule in test-client and inventory tests (8b2bca4)
• Fix: Accept Postfix delivery-status field order in received reports (f7343e1)

Refactored

• Refactor: Let one function own the propagation outer rows (52d2827)

Tests

• Test: Prove the not_local propagation refusal through a passing outer verdict (155a1cd)
• Test: Qualify the not_local propagation refusal on real Postfix (c2f4e03)
• Test: Freeze the propagation deployment overlay and inventory the propagator bounds (c84a06a)

Documentation

• Docs: Refine the propagation qualification evidence wording (d9c70e3)
• Docs: Disclose propagation qualification scope and accepted limits (c0dcccd)
• Docs: Record propagation qualification evidence and limitations (eea5d48)
• Docs: Accept RFC 3464 field groups in any order for received reports (c6b0980)
• Docs: Add not_evaluated to the embedded projection vocabulary (1a57378)
• Docs: Refine propagation route rules after daemon review (2c13c3e)
• Docs: Pin rebuild ordering, custody, and SMTPUTF8 rules after review (0b2c8fb)
• Docs: Correct received-DSN evaluation details after review (cffd1c0)
• Docs: Specify received-DSN evaluation and DSN propagation (c21d0d7)

Security

• Security: Refuse propagation without replay storage and keep the outer verdict first (35a2549)

Full Changelog: v0.1.25...v0.1.26