mirror of
https://github.com/yogeshojha/rengine.git
synced 2026-10-20 23:31:31 +02:00
- a name that publishes exchanges different from its zone's gets its own posture row under parent; with no _dmarc of its own it carries the parent's record marked inherited and is judged on sp - the fold gives each host its longest matching zone (zone_of), so a mail host's row wins for itself and its children - posture rail on the Web Assets tab beside the hygiene rail, reading the host-grain /subdomains/posture summary; the cell meters read the same summary so every number equals the rows its filter opens - MCP tool domain_posture over a target's newest settled run - review fixes: exact fold without LIKE, MX preference stripped, policy fetch outcome separated from policy content, redirect= qualifier resolved, dual-CIDR lookups counted, SPF includes resolved one batch per depth, DNSSEC and MTA-STS probes on a thread pool, a capped lookup count no longer a pass, GIN index on subdomains.posture_issues, spoofable read over every row, census runs only, excluded names never derive a zone, rows committed before the fold and finalize re-folds Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KAP7PmMKSfNAFse3s2y2Xj