DMARC policy: when to move from p=none to quarantine to reject

Most teams set DMARC to p=none and never move it. Here is the operator playbook for migrating safely through quarantine to reject, with the exact reports you need to monitor at each stage.