Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).

Subdomain policy (sp): when set, it applies to hostnames below this domain instead of p; if omitted, subdomains inherit the organizational policy.

pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).

Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.

Forensic (per-failure) reports. Often omitted for privacy or volume.