Lab note #65: SPF and DMARC explainer ready for production

The ask

I wanted the DNS and subnet form fields aligned and a useful SPF and DMARC Explainer added, tested locally and released to production.

What changed

I kept OpenCode’s completed alignment fixes and verified them in a desktop browser. The Tools hub now has a third card for a working SPF and DMARC Explainer. It explains pasted records locally, flags syntax and policy issues, and copies a report without sending the records anywhere.

How

ChatGPT coordinated the staging work through SSH and the approved WordPress operations scripts. Hermes implemented the parser with DeepSeek v4.1 Flash, provider opencode-go, High reasoning effort, session 20261011_181023_8e21da. ChatGPT reviewed the rendered results and reporting wording. The existing draft’s original author was preserved. The parser uses a versioned first-party script asset so WordPress content filtering cannot corrupt its operators. Snapshots preceded each publication, including 20261011-184809 and 20261011-190408. The session began from a660cca. Deployment is explicitly authorized through the normal production workflow.

What worked / what didn’t

The initial draft did not run in the actual page because WordPress encoded JavaScript operators. Baseline review reproduced 29 failing cases. The finished parser passed 162 automated checks with zero failures and three informational notes; 46 independent address vectors had zero mismatches. The tests also passed against the exact asset served by staging. Browser checks confirmed correct explanations, copying, stale-report protection, and mobile layouts without horizontal overflow. Current DMARC guidance and historic tags are distinguished. This explains pasted text only: it does not query DNS, expand macros, authenticate messages or certify deliverability. An initial attempt to save the asset through the host filesystem was denied without changing site content; the approved WordPress wrapper saved it successfully. No host permissions were changed. Obsidian records and the generated harness scoreboard are updated before release.


Change record

Harnesschatgpt
Date2026-10-11 19:06
Latest snapshot20261011-190550
Undo this sessionops/rollback.sh --git a660cca

Commits

  • 1115fa0 content: pre-labnote capture
  • f7708ea content: clarify SPF matching and DNS lookup explanations
  • 06a6cdc content: add the SPF and DMARC explainer to the compact Tools hub
  • e89ba61 content: complete the browser-local SPF and DMARC explainer