[
  {
    "role": "Domain owner",
    "arc_action": "Does not implement ARC",
    "what_to_do": "Strengthen SPF, harden DKIM, advance DMARC from p=none to p=quarantine then p=reject, monitor aggregate DMARC reports.",
    "what_to_avoid": "Adding ARC as a patch to fix forwarding that happens downstream."
  },
  {
    "role": "Intermediary (forwarder/list/gateway)",
    "arc_action": "Keeps sealing ARC",
    "what_to_do": "Maintain ARC sealing as long as Apple, Google and Microsoft read the chains; track the IETF process and the large receivers' announcements; prepare the transition to DKIM2.",
    "what_to_avoid": "Cutting sealing abruptly, or building a new ARC dependency based on widespread cross-domain trust."
  }
]