We drop DMARC reports by looking for "dmarc" in the subject, and the spec's own subject line does not contain the word

One regex in a 179 line inbound mail webhook, checked against the ABNF in RFC 7489 and the rewrite that replaced it in May 2026. Plus a six address allowlist that reads one recipient, and a category the code can never reach.