The Policy card

Status is whether this domain is active in every pipeline (ingestion, health checks, analysis, alerting) — Super Admins can deactivate/reactivate here, step-up gated.

Published is what DNS actually says right now, read live by the health check. Approved baseline is the policy you've explicitly signed off on as known-good — click "Approve as baseline" once you're satisfied the published policy is correct. Target is where you're working toward, edited in the card below.