R7 — Safe to advance policy to quarantine

Triggers when: the domain's currently published policy is p=none, the target policy calls for something stricter, and no known senders showed total authentication failure in the analysis window — i.e. every legitimate sender you know about would have survived enforcement.

What to do: this is a green light, not an automatic change — review the evidence, then advance p= to quarantine yourself via the domain page's target-policy editor. This app never edits DNS or auto-advances a policy on its own.