2. DMARC Failure Reports

Failure reports include details about transmission and DMARC authentication, often sent almost immediately after a Mail Receiver detects a DMARC failure. They are controlled by the ruf and fo tags from RFC 9989. Report generators MUST attempt delivery to each URI, MUST verify external destinations, MUST NOT consider ruf in psd=y DMARC Policy Records without specific agreements, and MUST implement outgoing report rate limits.