{
  "version": "1.0.0",
  "date": "2026-09-14",
  "synthetic": true,
  "mode": "strict-exact",
  "scope": "Assumed authentication flags; one SPF domain and one DKIM domain; no message, DNS, or organizational-domain verification.",
  "sources": [
    {
      "title": "RFC 9989: DMARC",
      "url": "https://www.rfc-editor.org/rfc/rfc9989.html#section-4.4",
      "accessed": "2026-09-14"
    }
  ],
  "cases": [
    {
      "id": "both-match",
      "title": "Both pass and match",
      "input": {
        "fromDomain": "NEWS.EXAMPLE",
        "spfDomain": "news.example",
        "spfPass": true,
        "dkimDomain": "news.example",
        "dkimPass": true
      },
      "expected": {
        "spf": {
          "authenticated": true,
          "domainMatches": true,
          "aligned": true
        },
        "dkim": {
          "authenticated": true,
          "domainMatches": true,
          "aligned": true
        },
        "passesModel": true
      },
      "explanation": "Both assumed passes use the same domain as From. ASCII case does not create a different domain."
    },
    {
      "id": "spf-other-dkim-fails",
      "title": "Authentication pass without alignment",
      "input": {
        "fromDomain": "news.example",
        "spfDomain": "sender.example",
        "spfPass": true,
        "dkimDomain": "signer.example",
        "dkimPass": false
      },
      "expected": {
        "spf": {
          "authenticated": true,
          "domainMatches": false,
          "aligned": false
        },
        "dkim": {
          "authenticated": false,
          "domainMatches": false,
          "aligned": false
        },
        "passesModel": false
      },
      "explanation": "SPF passes for sender.example, which is not news.example. Failed DKIM supplies no authenticated match."
    },
    {
      "id": "dkim-only",
      "title": "DKIM supplies the match",
      "input": {
        "fromDomain": "news.example",
        "spfDomain": "news.example",
        "spfPass": false,
        "dkimDomain": "news.example",
        "dkimPass": true
      },
      "expected": {
        "spf": {
          "authenticated": false,
          "domainMatches": true,
          "aligned": false
        },
        "dkim": {
          "authenticated": true,
          "domainMatches": true,
          "aligned": true
        },
        "passesModel": true
      },
      "explanation": "SPF does not pass. Matching, passing DKIM alone supplies the modeled authenticated identifier."
    },
    {
      "id": "spf-only",
      "title": "SPF supplies the match",
      "input": {
        "fromDomain": "news.example",
        "spfDomain": "news.example",
        "spfPass": true,
        "dkimDomain": "signer.example",
        "dkimPass": true
      },
      "expected": {
        "spf": {
          "authenticated": true,
          "domainMatches": true,
          "aligned": true
        },
        "dkim": {
          "authenticated": true,
          "domainMatches": false,
          "aligned": false
        },
        "passesModel": true
      },
      "explanation": "Matching, passing SPF supplies the modeled identifier even though passing DKIM uses another domain."
    },
    {
      "id": "matching-but-failed",
      "title": "Matching text without authentication",
      "input": {
        "fromDomain": "news.example",
        "spfDomain": "news.example",
        "spfPass": false,
        "dkimDomain": "news.example",
        "dkimPass": false
      },
      "expected": {
        "spf": {
          "authenticated": false,
          "domainMatches": true,
          "aligned": false
        },
        "dkim": {
          "authenticated": false,
          "domainMatches": true,
          "aligned": false
        },
        "passesModel": false
      },
      "explanation": "Both domain strings match, but neither assumed authentication result passes. Text matching alone is insufficient."
    },
    {
      "id": "subdomain-is-not-exact",
      "title": "Subdomain is not an exact match",
      "input": {
        "fromDomain": "news.example",
        "spfDomain": "mail.news.example",
        "spfPass": true,
        "dkimDomain": "signer.example",
        "dkimPass": true
      },
      "expected": {
        "spf": {
          "authenticated": true,
          "domainMatches": false,
          "aligned": false
        },
        "dkim": {
          "authenticated": true,
          "domainMatches": false,
          "aligned": false
        },
        "passesModel": false
      },
      "explanation": "mail.news.example differs from news.example under strict matching. Relaxed or organizational-domain behavior is not modeled."
    }
  ]
}