title: DMARC Report: Why would SPF 'fail' at the policy level but then 'pass' at the auth_results level?
body: <p>Within a DMARC report, why would there be a <code>&lt;spf&gt;fail&lt;/spf&gt;</code> at the <code>&lt;policy_evaluated&gt;</code> level and in the same record have a <code>&lt;auth_results&gt;</code> deliver a <code>&lt;spf&gt;</code> result of <code>&lt;result&gt;pass&lt;/result&gt;</code>? Is there some additional analysis after the policy is evaluated (which results in a fail) that ends up approving the email spf? I am trying to understand the steps utilized to approve/reject an email. Thank you for any input you can provide.</p>