Get alerted only when your email authentication actually fails

flowchart TD trig>"DMARC report email arrives"]:::trig s0["unpack report data"]:::task s1[("log report to database")]:::store s2["check for authentication failure"]:::task trig --> s0 s0 --> s1 s1 --> s2 gx{"× did SPF or DKIM fail"}:::gate s2 --> gx p00["send Slack and email alert"]:::task gx -->|"failure detected"| p00 p10["take no further action"]:::task gx -->|"no failure"| p10 p00 --> out p10 --> out out[/"alert only on real auth failures"/]:::out pay{{"attention only on genuine security problems"}}:::pay out --> pay classDef task fill:#e7f6fe,stroke:#34b8f0,color:#2c2a29 classDef svc fill:#f6f8fa,stroke:#7c8795,color:#2c2a29 classDef mi fill:#e7f6fe,stroke:#0079a8,color:#2c2a29,stroke-width:2px classDef human fill:#fff,stroke:#0079a8,color:#0079a8 classDef store fill:#f6f8fa,stroke:#0079a8,color:#2c2a29 classDef trig fill:#00a4eb,stroke:#0079a8,color:#fff,font-weight:bold classDef trigtime fill:#00a4eb,stroke:#0079a8,color:#fff,font-weight:bold classDef trigdata fill:#8ad4f5,stroke:#0079a8,color:#06314c,font-weight:bold classDef gate fill:#fff,stroke:#e8a23d,color:#6b4708,font-weight:bold classDef out fill:#1f9d6b,stroke:#167a53,color:#fff,font-weight:bold classDef pay fill:#06314c,stroke:#021f33,color:#fff