How to Read DMARC Reports Before You Move to p=reject

Your DMARC reports already list everyone sending mail as your domain. Here's how to read the XML, sort senders into fix-or-block buckets, and move from p=none to p=reject without losing real mail.