Current published policy

current_published_policy is updated automatically whenever the DMARC health check runs, by reading the domain's _dmarc TXT record live from DNS. It reflects reality, not intent — if someone edits DNS outside this tool, this field changes on the next health-check run, which is exactly what the policy-drift recommendation and alert watch for.