Most recent stress survey returned an overall score of 3.6 from 16 entries; included more high-stress ratings of five than usual, plus one rating of one and several twos; anonymous feedback included comments about wanting to leave during high-pressure weeks
Jun 5, 2026
·
—
Ms. Raahi agreement history
Ms. Raahi
An old agreement capped onsite tech hours at 16. When the dedicated tech fee expired the agreement should have been unlimited. April created a new unlimited onsite tech agreement to replace it.
Jun 5, 2026
·
—
Brand templates location
Crimson IT Marketing
Official PowerPoint and Word brand templates are believed to reside in Marketing SharePoint; master location and access paths need to be confirmed and documented for all stakeholders.
Aug 27, 2026
·
—
Christi Brown background
Christi Brown
Christi Brown is vCIO at Crimson IT and previously worked with the LA Dodgers.
Jun 5, 2026
·
—
Copilot in Excel core rules
Microsoft Copilot / Excel
Four rules for reliable Copilot use in Excel: data must be in a properly defined table (Ctrl+T) with clean headers and no blank rows; work within the desktop app not the web; submit one prompt at a time; instruct Copilot to act on file data rather than pasting large datasets into the chat.
Aug 5, 2026
·
—
Weingart Plaud Adoption
Weingart
Weingart is a current Plaud adopter that records client intake sessions using the device due to HIPAA compliance requirements
Jul 23, 2026
·
—
Peter grandson born May 17 2026 in Bend Oregon
Peter (BAFMA COP)
Peter first grandson born May 17, 2026 in Bend, Oregon. Stayed at VRBO across the street from daughter house to help babysit granddaughter. Daughter lives in Bend.
Jun 3, 2026
·
—
Copilot in PowerPoint deck creation
Microsoft 365 Copilot / PowerPoint
Copilot in PowerPoint can create decks from scripts or existing files; users define audience and length; Copilot may ask clarifying questions and can insert branded slides at specific positions; it may occasionally struggle to locate files requiring expanded search.
Aug 11, 2026
·
—
Sync vs. Add shortcut to OneDrive
Microsoft OneDrive
Sync creates a device-specific top-level entry in File Explorer replicating mapped drives and auto-cleans as permissions change; Add shortcut appears across all signed-in devices but may cause access denied errors after permission changes post-migration
Jun 15, 2026
·
—
Peerless and Meraki infrastructure constraint
Peerless / Meraki
Peerless cannot move until 2027 and Meraki devices remain outside Crimson control until April 2027. Budget is in place to replace switches and firewalls across sites before the April 2027 Meraki control change.
Jun 18, 2026
·
—
Foothill conditional access pilot
Anton / Foothill
Conditional access policies are being piloted with a Foothill pilot group; rollout targeted to begin August 27, 2026.
Aug 27, 2026
·
—
SCHARP AI Policy HIPAA Requirement
SCHARP
AI policy must explicitly prohibit entry of any client information into AI tools to prevent HIPAA violations.
Aug 31, 2026
·
—
AI planning horizon
Peer group
Group consensus is that AI planning horizons are now measured in months, not years, due to the pace of the news cycle and model releases.
Aug 11, 2026
·
—
Cloud Desktop Deployment Date
Client
Client planned to deploy Cloud Desktop with an update on 2026-06-17.
Jun 18, 2026
·
—
Copilot security integration advantage
Microsoft 365 Copilot
Copilot operates within user data and adheres to existing security rules and permissions, unlike standalone AI tools which may have different features but weaker integration and security.
Jun 5, 2026
·
—
ConnectWise progress billing - bill after close setting
ConnectWise
To enable progress billing on an open project, the 'Bill this project only after it's been closed' option in the project's finance tab must be unticked; otherwise the project will not appear on the invoicing board until closure.
Jun 16, 2026
·
—
Claude - Box integration method
Claude / Box
Integration is achieved by creating a dedicated Box user with limited viewer permissions on specific folders, then connecting via Claude's Connectors settings using those credentials. Claude only accesses explicitly permitted folders.
Jul 23, 2026
·
—
Copilot Teams post-meeting recap features
Microsoft Teams / Copilot
Post-meeting recaps include video playback, AI-generated notes, speaker timelines, and full transcripts; Copilot can be queried for decisions and open items from recorded and transcribed calls.
Aug 6, 2026
·
—
VPN Outage - Pasadena Spectrum
Spectrum / Client VPN
VPN access was blocked by a likely Spectrum outage in Pasadena as of July 23, 2026, preventing access to latest usage reports.
Jul 23, 2026
·
—
Scheduling System Access - Pete Invited
Pete
Christi previously sent a system access invitation to Pete for the on-call scheduling system.
Aug 12, 2026
·
—
Security Awareness Risk Score
Security Awareness Platform
Current risk score is 49, down from 51; primary drivers are email security and account hygiene issues.
Aug 3, 2026
·
—
Westwood AI projects in flight
Westwood
Three simultaneous AI projects for Westwood: Claude deployment, an inbox app, and a Base Forty-Four app; Brett requested the inbox app be prioritized; Speaker 2 has spent over 300 hours on the inbox app
Aug 11, 2026
·
—
Makibus plugin - Capital IQ conflict
Makibus
Makibus has two known plugins; one is Capital IQ, which is documented by the vendor as a known cause of Excel load failures on MacBooks.
Jun 5, 2026
·
—
UBI Agreement Configuration Levels
ConnectWise UBI
Agreements in UBI can be configured at the site, vendor, or company level, providing flexible and granular billing control.
Jun 5, 2026
·
—
Philippines team influence on average hourly rate
Crimson IT Philippines team
The Philippine team's lower labor rates pull down the blended average; Christi recalled a historical average of approximately $17 per hour when the Philippines team was factored in.
Jun 18, 2026
·
—
Fortigate management interface pen test finding
Fortigate
Pen test reported Fortigate management interface as reachable. Clarified that an IP allow-list is in place per user and was active during testing. Nate accessed it via a specific rule created for him. Finding considered remediated.
Jun 5, 2026
·
—
Weekly Power Automate training cadence
Stephanie / Speaker 13
Weekly Power Automate training flows are planned and recorded; Stephanie is curating and distributing the video library.
Aug 27, 2026
·
—
Lana Mseryan role
Lana Mseryan
Lana Mseryan is Acting CDO at AbilityFirst.
Aug 19, 2026
·
—
Training Video Marketing Process
Marketing
Christi updates training videos and marketing polishes them before distribution. If videos are not ready, Stuart receives blanket access to the source file location.
Aug 29, 2026
·
—
Katie Support Ticket Profile
Katie
Katie submits tickets primarily on behalf of her staff for phone issues and badging access rather than for personal IT problems.
Aug 3, 2026
·
—
SCHARP - Barracuda ESG: nothing in mailbox, pull from Cloud Control portal
Barracuda ESG
16 messages found - all marketing newsletters, support tickets (Case 05396062), password resets, account access transfer. NO contract data.
Christi has Barracuda Cloud Control admin access (created 12/2025 by Lorenzo, password reset 2/19/26).
CW Help ticket #938596 closed 5/1/26 (Setting up barracuda CITadmin account).
Next step: Pull contract details from Barracuda Cloud Control portal directly.
May 5, 2026
·
—
Rule lifecycle management for time-bound projects
Outlook Copilot / n8n
High and low priority flags for time-bound events such as pending closings should be created as temporary rules with a defined removal process once the event concludes, to prevent rule sprawl.
Jun 18, 2026
·
—
ScalePad LMX - Adopted as Standard vCIO Tool at Crimson IT
Pete, Anzor, Christi, Jason
ScalePad Lifecycle Manager (LMX) is now the standard tool for vCIOs at Crimson IT. Features: asset tracking from RMM, warranty lookups, hardware reports (sent monthly to all clients via Seg/APS), assessment templates (compliance, cyber, new client), roadmap/Gantt/Kanban views with on-track/at-risk status, M365 integration available (shows active usage beyond Liongard), CW Manage integration (daily sync). Cost: ~$20/client/month. Update cadence: 2x/week (Wed + Fri). Portal URL: myapps.myapplication.microsoft.com. Pete's guidance: don't make it too complex or it becomes stale. Must be accurate enough to check anytime.
Apr 21, 2026
·
Deadline: All client orgs current by April 30. Pete/Anzor will spot-check. Christi has SCHARP linking issue (name mismatch RMM vs CW). Anzor enabled Hudu sync for networking, Meraki, switches, LAN, printing, wireless. Pete to schedule call with Anton re: RMM patch accuracy.
Constant Contact allocation
Constant Contact
Constant Contact is shared by Development and Marketing; a saved favorite 50/50 allocation exists in Concur and should be applied consistently.
Aug 12, 2026
·
—
Gabby no-charge training entries for Ms. Raahi
Gabby
Gabby logged approximately 1.1 to 1.2 hours of no-charge time for training and assisting technician Jesse on PST exports, Office licensing, and backups. These entries produced the one-hour zero-rate adjustment line on Ms. Raahi's invoice.
Jun 5, 2026
·
—
SharePoint link sharing permissions
Microsoft SharePoint
Anyone (external) links expire after 30 days by default; internal org links have no expiration; version history is accessible via File > Info > Version History
Jun 15, 2026
·
—
Intratum - Mobile Carrier Consolidation Vendor
Intratum (Marco Cimmino)
Intratum, contact Marco Cimmino, is a potential multi-carrier mobile plan consolidation vendor. Being evaluated for SCHARP mobile cost optimization.
Apr 16, 2026
·
—
Plaud and OpenAI Deployment
Plaud / OpenAI
Plaud and OpenAI tools have been deployed to client machines; RMM integration is pending as the next technical step.
Jul 21, 2026
·
—
Text to Columns for Date-Time Splitting
Microsoft Excel
Combined date-time values can be split using Data > Text to Columns with Delimited option and delimiter T. Resulting date columns can be formatted using Short Date or custom pattern DD\MM\YYYY.
Jun 5, 2026
·
—
Generational trauma and boundary impact
Teen parents in foster care
Absence of clear caregiver boundaries has been directly linked to repeat pregnancies in quick succession among teenage parents in foster care, perpetuating generational cycles of trauma
Aug 24, 2026
·
—
Copilot usage monitoring capability
Microsoft Copilot
Crimson IT can monitor Copilot active users and usage patterns across Outlook, Word, Teams, and Edge to inform license ROI assessments and adoption adjustments.
Aug 5, 2026
·
—
Hudu documentation migration urgency
Hudu
Olivia has a large volume of documentation requiring migration into Hudu with only a couple of days remaining; existing documentation automation tool built by Christi can assist with the process
Jun 5, 2026
·
—
Christi - Adoption and Foster Care
Christi Brown
Christi finalized the adoption of her daughter Dom and is now fostering two additional teenage girls through California's extended foster care program for non-minor dependents. Dom received a full scholarship to UC Merced and is leaving for college in approximately four weeks from the meeting date of 2026-07-24.
Jul 24, 2026
·
—
Cloud Teams rollout quote reference
Client
Cloud Teams SSO rollout is scoped under quote 75-14; setup uses Cloud Teams platform, not Cloud Enterprise.
Jun 17, 2026
·
—
UBI Company Mapping - Cascading Architecture
ConnectWise UBI
UBI supports company-level mapping that cascades down to sites, minimizing per-site configuration overhead compared to the legacy RMM-PSA integration.
Jun 5, 2026
·
—
Monty Single Point of Failure Risk
Monty (Eldridge)
Vince identified that Eldridge processes rely heavily on Monty as an individual rather than documented systems, creating a single-point-of-failure risk.
Jun 5, 2026
·
—
Compliance Officer Candidates
Christi, Pete
Internal candidates under consideration: Robert (to evaluate), Sean (viewed as well-rounded, favorable), Bogdan (concern about mindset fit). No selection finalized as of 2026-05-26.
Jun 6, 2026
·
—
SCHARP billing cadence
Christi Brown
SCHARP billing is managed on a weekly basis.
Jul 21, 2026
·
—
Contract fulfillment timelines
Comtech / G2
Comtech contracts can be produced the same day upon request; G2 contracts may take one to two days.
Jun 18, 2026
·
—
Inactive client entities
Crown Sierra / Green Street
Crown Sierra and Green Street are no longer in operation and should be removed from active service and reporting lists.
Jun 18, 2026
·
—
Copilot agent naming convention
Microsoft 365 Copilot Agents
Agents should be named with department codes in brackets for discoverability across the organization.
Aug 6, 2026
·
—
Copilot agents for repeatable tasks
Microsoft 365 Copilot
Copilot supports persistent agents with saved instructions for repeatable tasks such as passphrase-based password generation; sensitive agent chats should be permanently deleted after use.
Jun 5, 2026
·
—
IT system updates disrupting Claude localized workflows
Crimson IT internal environment
Forced corporate IT system updates can temporarily disrupt localized Claude workflows and terminal command access. On 2026-08-14 an 08:00 AM forced update caused a 20-minute reboot disruption during training.
Aug 18, 2026
·
—
Maverick migration timeline
Maverick
Ongoing user changes at Maverick are expected to continue for several more weeks with final migration targeted by end of June 2026.
Jun 5, 2026
·
—
Speaker 2 Out of Office
Speaker 2
Speaker 2 will be out of office on August 20, 2024.
Jul 23, 2026
·
—
Crimson IT help desk AI capability
Crimson IT help desk
The Crimson IT help desk is trained on AI tools including Copilot and ChatGPT; complex AI questions are escalated to Christi.
Jun 5, 2026
·
—
Alere pilot group members
Alere
Pilot users are Colin, Mark, Jolie, Daniel, Sam, and the executive sponsor. Pilot group is tasked with developing 2 to 3 test use cases each.
Jun 5, 2026
·
—
Ongoing Training Availability
Christi
Open training sessions continue but less frequently before late September. Christi has irregular availability late September to early October. General training calendar and more offerings, including Power Automate, resume in October. Staff can book 1:1s via booking link in Christi's email signature.
Aug 29, 2026
·
—
Meraki and Dell procurement lead times challenging
Meraki / Dell
Crimson having significant procurement challenges with Meraki and Dell. Lead times are challenging as of June 2026. Sales team requesting hardware requests be submitted as early as possible. Working to add additional distribution channels.
Jun 2, 2026
·
—
Claude AI permission model
Claude AI / Microsoft
AI permissions in Claude mirror existing Microsoft user permissions; users cannot access data in Claude that they do not already have permission to see within Microsoft.
Aug 12, 2026
·
—
Signal Partners onboarding contact
Signal Partners / Tim
Christi has spoken with Tim at Signal Partners and shared information with Pete; onboarding details are pending further internal alignment
Jun 5, 2026
·
—
Uncommon 601 CW and Hudu naming
Uncommon 601
Client is listed as Uncommon 601 in ConnectWise; the Hudu location is filed under UncommonDevelopers.
Jun 5, 2026
·
—
401k transition to Empower
Crimson IT US employees
401k is moving from American Funds to Empower; blackout period runs July 13 to August 3 2026; contributions from July 25 paycheck will be remitted to Empower
Jul 22, 2026
·
—
Microsoft Copilot cloud team license pricing
Microsoft
Cloud team license for Microsoft Copilot is quoted at $25 per user per month with a five-user minimum, totaling $125 per month, which includes $100 of monthly credits.
Jun 18, 2026
·
—
AI Training Session Dates
Crimson IT
Live AI training sessions are scheduled for August 11 and August 13, 2026. Both will be recorded and shared. The Tuesday session does not require the enterprise AI version; Thursday recommends but does not require it.
Aug 12, 2026
·
—
Project 2317 Interim - Cloud PC Self-Reprovisioning Incident
Project 2317 Interim
A cloud PC self-reprovisioned unexpectedly; Help Desk was informed and the incident was logged in Hudo.
Jul 28, 2026
·
—
Cotsen AI training scope
Cotsen
AI training started 2026-05-19 covering both Copilot and CoWork because the final AI tool selection has not been made; AI usage policy will be sent for signatures after training
Jun 6, 2026
·
—
SCHARP - Peerless/Infobip account transition still open from Feb
Patrick Doolin (Infobip)
Christi sent formal intro to Patrick Doolin at Peerless/Infobip 4/22 as new CIO. Lorenzo departure ticket 00757680 from Feb 23 still unanswered. Requesting account access transfer, internet upgrade for HQ and Cyxtera. On 3-year agreement through May 2027.
Apr 22, 2026
·
—
CIT capacity calculator
Christi
Christi built the CIT capacity calculator; it was posted in shared resources by Anzor. Tool is relevant for help desk cost and capacity estimation.
Jun 18, 2026
·
—
Entertainment subscriptions class assignment
Netflix / Disney / Peacock
Netflix, Disney, and Peacock subscriptions should be classed under Lauren Selfrank in Concur.
Aug 12, 2026
·
—
Media Converter Delivery Location
Angel
Drop-ship target for media converters is either the camp or the technician's office in Irvine near Cal State Fullerton; must arrive by Wednesday morning to support Thursday on-site work.
Jun 5, 2026
·
—
AF Board moving to true cost model (governance-level commitment)
AF Board / Carl Gayden CFO / Susanna / Kathy
AF's board has decided to commit to a true cost accounting model. Christi flagged 2026-04-30 with note that fuller meeting context is forthcoming. Historical context: Cost Allocation Dashboard work since 3/12/2026 was tied to operational true-cost push from Susanna/Kathy/Carl. Board taking it on = escalation from operational to governance. Expected ripple effects: IT charged to programs at full loaded cost (not subsidized), Cost Allocation Dashboard becomes mandatory deliverable, Crimson billing structure with AF may need restructuring, program-level IT consumption reporting needs to exist, agreement 449/313 split may need program-level allocation logic. See Agent Queue rec9pCVwETfn1c2N8 for full context.
Apr 30, 2026
·
Surface to Bekker, Rex, Warren on next session start. Update entry once Christi's meeting note arrives with full board decisions and timeline.
Helpdesk same-day resolution rate
Helpdesk
As of May 19, 2026 weekly metrics: 31 compliance tickets, 51% same-day resolution, 385 open tickets (increasing trend), 1.19 hours average time per ticket (decreasing trend).
Jun 5, 2026
·
—
Copilot Agent naming convention
Microsoft Copilot / Alere
Shared Copilot Agents at Alere should be named using a three-letter department code in brackets followed by a descriptive name, for example [PMG] Lease Abstract Assistant.
Aug 5, 2026
·
—
Clio API availability
Clio
Clio has a full API that allows creation of custom connectors in Power Automate and Claude.
Aug 27, 2026
·
—
Ansar Communication and Change Governance Pattern
Ansar
Ansar makes structural changes to ConnectWise departments and boards without notifying Christi or Olivia and without documenting in Setup Tables notes; this pattern is the identified root cause of recurring access and board visibility defects; past interpersonal misfires (e.g., the 'pretty' comment) are also noted
Jun 5, 2026
·
—
AF Camp Paivika Capex - Original 110K Request Documentation
Carl Gayden (CFO) / Kathy Cobb (Finance)
Camp Paivika infrastructure upgrade original capex: Quote 7012 (Part 1) = 40000 + Quote 7013 (Part 2) = 42950.95 + ComDirect cabling = 27524.17 = TOTAL 110475.12. Down payment of 82950.95 received 1/13/26 (CW Ticket 908452). Kathy Cobb (acting CFO) reduced budget by approx 36K before Carl Gayden arrived as new CFO. Sergio backed Crimson in 5/19/26 ELT meeting. Carl needs to find the 36K from another budget line to fully fund the project. Quote files in Camp Upgrade folder.
May 20, 2026
·
—
Client External AI Tutor
Client
Client is engaged with an external third-party tutor for AI prompt training, running in parallel to Crimson IT's engagement.
Jun 18, 2026
·
—
AbilityFirst HIPAA-compliant storage policy
AbilityFirst
AbilityFirst employees must store data in SharePoint, Teams, or OneDrive for HIPAA compliance and are forbidden from using personal Google Drive accounts.
Jun 6, 2026
·
—
UBI Mid-Month Contract Billing - Known Issue
ConnectWise UBI
UBI sync may error when contract year cycles have mid-month start dates. Feature is under review; updates will be posted in release notes and the ConnectWise Virtual Community.
Jun 5, 2026
·
—
AI training delivery schedule
Crimson IT / Cotsen
The AI training session is being delivered three times total; attendees may join additional sessions as refreshers; sessions are recorded and a recording link and summary are emailed after processing
Jun 6, 2026
·
—
Weingart - yellow CSAT on ticket 929436
Jose (Crimson)
Customer Thermometer yellow alert for Weingart Center ticket 929436. Anonymous. Jose was ticket owner.
Apr 21, 2026
·
—
Token Spend Risk Without Budget Controls
AI Community of Practice
An attendee burned approximately 500 dollars in six to eight hours with token limits removed; token spend tracking and budget control are considered a first-class concern in AI deployments
Jul 30, 2026
·
—
SCHARP Box migration destination change
SCHARP
Reports are stored in both SharePoint and Box; Box migration target has been changed to Microsoft rather than Google; requires stakeholder confirmation.
Jun 16, 2026
·
—
ADT/Brivo HiTech Access Control - EOL and Stalled
ADT, Brivo, HiTech
ADT/Brivo HiTech vendor situation still unresolved for both SCHARP and Crenshaw/BAFMA sites. System went EOL last month. Escalation email sent. Dr. Barbour needs to sign off on quote to proceed. This is blocking and time-sensitive.
Apr 16, 2026
·
—
Conference history and real estate focus
Anzor
Crimson IT has attended industry conferences since approximately 2018 or 2019; Anzor has maintained focus on the real estate industry vertical through these events
Aug 28, 2026
·
—
Copilot security policies status
Microsoft Copilot
Copilot security policies are active and functioning with no alerts triggered; one policy has been flagged as needing tightening but is low priority.
Aug 27, 2026
·
—
David Aberra - Contact Info
David Aberra
David Aberra is Director of Support and Operations at Newmark. Email: David.Aberra@nmrk.com.
Jun 10, 2026
·
—
Inbox/Calendar Automation App - Current Iteration
Christi Brown
Crimson's internal version is iteration 5 or 6 and includes additional features and color-coding beyond the base demo version connected to Christi's personal Outlook
Jul 21, 2026
·
—
CIT Admin Permissions Gap
CIT Admin Account
CIT admin account is in use without Senthil Segura integration; a same-mask access alignment is needed and pending Charles providing guidance; this is a known temporary permissions constraint.
Jun 18, 2026
·
—
SSO Setup Performed Pre-Kickoff
Vince
Vince set up SSO to ensure Microsoft sign-in works prior to project kickoff and without awareness of the formal project ticket, creating documentation and billing gaps.
Jun 18, 2026
·
—
Power Automate licensing included in standard Microsoft enterprise plans
Microsoft Power Automate
Power Automate is included at the standard level for any organization in the Microsoft enterprise environment; most users do not require a premium license for core automation needs.
Aug 27, 2026
·
—
Copilot agent building best practices
Microsoft 365 Copilot
Effective agents use fewer than approximately 10 source files to reduce dilution; instructions should be written like onboarding a new hire with exact sections, order, tone, and depth specified; agents should be tested against previously completed work to validate quickly
Aug 3, 2026
·
—
AF - Melissa Lloyd former employee email/Teams access approved
Michuan Fleming / Sergio Rizzo-Fontanesi
Michuan requested access to former employee Melissa Lloyd's email and Teams. Sergio (President/CEO) approved 4/20 with no objection.
Apr 20, 2026
·
—
Internal project kickoff standard
Mike
Agreed direction is a brief internal kickoff call (approximately 15 minutes) between account management and the PM for every approved project to establish ownership and alignment.
Jun 16, 2026
·
—
Sam - AI productivity workflows
Sam
Sam uses AI tools personally for inbox spam sweeping, flagging important emails, and tracking tasks assigned by superiors using ChatGPT.
Jul 23, 2026
·
—
Gabby certification
Gabby
Gabby completed Fortinet free training certifications as of approximately mid-2026.
Jun 6, 2026
·
—
Anzor granted Azure Reader to DCI pen tester without ticket
Anzor Zurhaev / Nathan Smith (DCI)
4/7/2026: Anzor directly granted Azure Reader permission to Nathan Smith (nsmith@dcinnovationsinc.com) on two Crimson IT subscriptions for DCI pen test engagement. No ticket existed. No end date documented. Access must be revoked when engagement ends. Change logged retroactively as CW ticket #932081. Pattern: Anzor fires from the hip on access grants without creating tickets.
Apr 7, 2026
·
DCI Partners: Dmitry Finkler (CISSP, CISM), Daniel Zimerman (CISSP, CEPT). Anton Mark providing internal access. Track engagement end date for access revocation.
Concur expense report in progress
Speaker 2
Speaker 2 was actively working on completing their Concur expense report and tracking down outstanding receipts as of August 10, 2026.
Aug 12, 2026
·
—
DMARC alignment requirement
Domain email infrastructure
Correct DMARC enforcement requires the From domain to align with either the SPF-authenticated Return-Path domain or the DKIM d= domain; all legitimate sending services must be authorized in SPF or DKIM-sign outbound mail