{
 "metric": "dmarc-reporting",
 "segment": "gb-companies",
 "anchor": "company",
 "label": "UK companies",
 "population": "UK companies",
 "states": [
  "receiving",
  "none_configured",
  "unauthorised"
 ],
 "quiet_failure_states": [
  "none_configured",
  "unauthorised"
 ],
 "measurement": "Tier 0. Read the `rua=` tag from the `_dmarc` TXT record already fetched for `dmarc-policy`. Where a destination mailbox sits on another domain, RFC 9990 requires that domain to publish `<policy-domain>._report._dmarc.<destination>` (or a `*` wildcard at the same name) before a conforming receiver will send anything. Denominator: domains that **have** a DMARC record — a domain with no policy has nothing to report on and is excluded rather than counted as receiving nothing.",
 "why_it_matters": "The reporting half of the p=none story, and the same shape: the record is valid, the checker is green, a reporting address is configured, and not one report has ever arrived. Without the feedback loop nobody ever learns which mail is failing, so the rollout from `none` to `reject` — the thing the policy exists to reach — never starts. `unauthorised` is the quieter of the two: the owner did everything visible correctly and the consent record is on a domain they may not control.",
 "limits": "Aggregate (`rua`) only; `ruf` uses the same consent mechanism but is rarely honoured and is not counted. Reporting is orthogonal to policy strength — a domain can enforce `reject` and still be blind, or sit at `p=none` and receive reports perfectly — so this is not a second reading of `dmarc-policy`. A destination that authorises the domain but silently drops the mail is indistinguishable from one that delivers it; consent is observable from outside, delivery is not.",
 "data_tier": "dns",
 "population_predicate": "has_mx",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-10-01",
  "n": 1288,
  "qf_pct": 54.58,
  "ci": [
   51.85,
   57.28
  ],
  "dist": {
   "receiving": 45.42,
   "none_configured": 48.21,
   "unauthorised": 6.37
  },
  "snapshot": "uk-companies-house-per600-seed20260728"
 },
 "series": [
  {
   "day": "2026-09-21",
   "n": 1261,
   "qf_pct": 54.4,
   "ci": [
    51.64,
    57.13
   ],
   "dist": {
    "receiving": 45.6,
    "none_configured": 49.25,
    "unauthorised": 5.15
   },
   "snapshot": "uk-companies-house-per600-seed20260728"
  },
  {
   "day": "2026-09-28",
   "n": 1262,
   "qf_pct": 54.28,
   "ci": [
    51.52,
    57.01
   ],
   "dist": {
    "receiving": 45.72,
    "none_configured": 49.13,
    "unauthorised": 5.15
   },
   "snapshot": "uk-companies-house-per600-seed20260728"
  },
  {
   "day": "2026-10-01",
   "n": 1288,
   "qf_pct": 54.58,
   "ci": [
    51.85,
    57.28
   ],
   "dist": {
    "receiving": 45.42,
    "none_configured": 48.21,
    "unauthorised": 6.37
   },
   "snapshot": "uk-companies-house-per600-seed20260728"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/dmarc-reporting/gb-companies"
}