The known-senders allowlist

Add a rule with an IP or CIDR range, a label, and either a specific domain or "All domains" (a global rule, applied when no domain is specified). There's no update form — editing a rule is delete-then-re-add, since that keeps the audit trail unambiguous about what changed.

A new or changed rule takes effect the next time enrichment or the recommendation engine runs, not instantly — this page only writes the table.