SPF, DKIM and DMARC, explained by someone who had to make it work

I build a transactional email API, which means I have spent an unreasonable amount of my life reading...