R8 — Safe to advance policy to reject

Triggers when: the same shape as R7, but starting from p=quarantine instead of p=none — the step up to the strongest available policy.

What to do: same as R7 — review the evidence, then deliberately advance the target policy to reject yourself when confident. This rule only fires when your own target policy calls for reject specifically — under DMARCbis (RFC 9989 §3.2.9), quarantine is also a fully valid, permanent "Enforcement" state, so staying there is a legitimate choice, not something this rule treats as unfinished.