- a name that publishes exchanges different from its zone's gets its own
posture row under parent; with no _dmarc of its own it carries the parent's
record marked inherited and is judged on sp
- the fold gives each host its longest matching zone (zone_of), so a mail
host's row wins for itself and its children
- posture rail on the Web Assets tab beside the hygiene rail, reading the
host-grain /subdomains/posture summary; the cell meters read the same
summary so every number equals the rows its filter opens
- MCP tool domain_posture over a target's newest settled run
- review fixes: exact fold without LIKE, MX preference stripped, policy fetch
outcome separated from policy content, redirect= qualifier resolved,
dual-CIDR lookups counted, SPF includes resolved one batch per depth,
DNSSEC and MTA-STS probes on a thread pool, a capped lookup count no longer
a pass, GIN index on subdomains.posture_issues, spoofable read over every
row, census runs only, excluded names never derive a zone, rows committed
before the fold and finalize re-folds
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KAP7PmMKSfNAFse3s2y2Xj