Practical setup and debug steps for domain admins: configure SPF, enable DKIM, publish DMARC with p=none, and avoid SPF's 10-lookup traps.