Settings & safety
Sender identity, suppression, kill switches, feature flags and the audit trail.
Sender health
OUTREACH DISABLED — DRAFTS ONLY
SENDING DOMAIN
FAIL
REACH_SENDER_DOMAIN / REACH_SENDER_FROM is not set
OUTREACH SUBDOMAIN
UNKNOWN
A dedicated outreach subdomain isolates reputation from transactional mail
SPF
UNKNOWN
No sending domain configured. Publish an SPF policy, or set REACH_SENDER_SPF_VERIFIED once you have verified it yourself
DKIM
UNKNOWN
No sending domain configured. Publish a DKIM key, or set REACH_SENDER_DKIM_VERIFIED once you have verified it yourself
DMARC
UNKNOWN
No sending domain configured. Publish a DMARC policy, or set REACH_SENDER_DMARC_VERIFIED once you have verified it yourself
DMARC ALIGNMENT
UNKNOWN
Alignment requires SPF and DKIM to authenticate the same domain under an enforcing DMARC policy
TLS
PASS
Provider API is reached over HTTPS with certificate verification
FORWARD DNS
FAIL
Forward DNS for (unset)
REVERSE DNS
N/A
Reverse DNS is the provider's responsibility for API-based sending
BOUNCE WEBHOOK
FAIL
Set REACH_EMAIL_WEBHOOK_SECRET to verify provider webhooks
COMPLAINT HANDLING
FAIL
Complaint processing shares the bounce webhook configuration
UNSUBSCRIBE
FAIL
A postal address is required before an opt-out footer can be built
ONE-CLICK UNSUBSCRIBE
PASS
List-Unsubscribe and List-Unsubscribe-Post headers are set on every send
SUPPRESSION
PASS
Suppression is checked at decision time and again at send time
POSTAL ADDRESS
FAIL
Set REACH_SENDER_POSTAL_ADDRESS
EMAIL PROVIDER
FAIL
Transactional Email Provider: NOT_CONNECTED
DOMAIN REPUTATION
UNKNOWN
Domain reputation is reported by the provider's postmaster tools, not by REACH
Emergency stops
Outreach send stop
Blocks every send while leaving research running.
Global emergency stop
Refuses every provider call, job and send.
Feature flags
Phase One non-goals stay off. They exist so the surrounding code has a real switch to test against.
reach.authenticated_browser_automation
OFF
reach.automated_form_submission
OFF
reach.automated_reply_sending
OFF
reach.autonomous_spend
OFF
reach.autopilot
OFF
reach.captcha_solving
OFF
reach.contact_graph_export
OFF
reach.copilot_email
ON
reach.model_training_on_campaign_data
OFF
reach.scout
ON
reach.social_dm_automation
OFF
Roles
Acting as owner@streetbanker.local (OWNER)
REACH has no session system yet, so it resolves the acting principal from REACH_PRINCIPAL_EMAIL and REACH_PRINCIPAL_ROLE. Permissions are enforced on every privileged call; no model can grant itself one.
OWNER
ADMIN
CAMPAIGN MANAGER
REVIEWER
ANALYST
VIEW ONLY
Suppression
Global and permanent. REACH never removes an entry.
Suppression list is empty.
Values are stored as keyed hashes, never as plaintext.
Audit trail
Hash-chained. A deleted or edited row breaks the chain.
Chain verified