Alignment simulator
Move the pieces. Watch DMARC decide.
DMARC passes when a mechanism passes AND its identity aligns with the visible From domain. That one sentence explains most delivery mysteries. Drag the identities around and watch the receiver's verdict recompute, exactly as the live tester computes it.
The identities receivers compare
SPF check
DKIM check
aspf
adkim
Policy
t=y (test mode)
What the receiver computes
mailer.esp-provider.netno match From yourbrand.comstrict d=yourbrand.com
Alignment is the DMARC question: does a passing identity match the From domain people actually see? One aligned pass is enough.
DMARC passes · DMARC passes; delivery is up to the receiver
DKIM passed and aligned with yourbrand.com, so DMARC passes. Delivery still depends on the receiver.
This page teaches the evaluation receivers run. To see it run on a real message from your own sending setup, use the live test. The URL updates as you change the controls, so any configuration is shareable.