24 Recovery Runbooks

Reputation Recovery

Structured detection, containment, verification, recovery and prevention.

Microsoft S775 or reputation throttling

Evidence-first containment and recovery.

Gmail temporary deferrals

Evidence-first containment and recovery.

Yahoo/AOL temporary deferrals

Evidence-first containment and recovery.

Sudden SPF, DKIM or DMARC failure

Evidence-first containment and recovery.

Complaint-rate spike

Evidence-first containment and recovery.

Hard-bounce spike

Evidence-first containment and recovery.

Queue age growing rapidly

Evidence-first containment and recovery.

Single source IP blocked

Evidence-first containment and recovery.

Sending-domain reputation drop

Evidence-first containment and recovery.

DKIM selector missing or invalid

Evidence-first containment and recovery.

PTR and HELO mismatch

Evidence-first containment and recovery.

SPF lookup limit exceeded

Evidence-first containment and recovery.

Legitimate traffic failing DMARC

Evidence-first containment and recovery.

One tenant damaging a shared pool

Evidence-first containment and recovery.

Unknown-user responses increasing

Evidence-first containment and recovery.

Feedback-loop ingestion stopped

Evidence-first containment and recovery.

Suppression synchronization failure

Evidence-first containment and recovery.

Provider dashboard warning

Evidence-first containment and recovery.

Warm-up metrics regress

Evidence-first containment and recovery.

Marketing traffic impacts transactional delivery

Evidence-first containment and recovery.

DNS change not visible consistently

Evidence-first containment and recovery.

SMTP TLS certificate expired

Evidence-first containment and recovery.

Logs cannot identify tenant or stream

Evidence-first containment and recovery.

Recovery canary fails

Evidence-first containment and recovery.

Search Trushilla Documentation