feat: add source recommendations

docs/development/roadmap.md

@@ -42,13 +42,13 @@ Objective: turn parsed DMARC data into administrator-friendly reports.
 
 Priority tasks:
 - Add "what changed" summaries for newly observed senders and sudden compliance drops.
-- Add actionable recommendations for common SPF, DKIM, and DMARC failure patterns.
 
 Delivered:
 - Dashboard time-series charts show daily mail volume, compliance rate, and failure rate.
 - Top sending sources show DMARC, SPF, and DKIM pass/fail breakdowns on the dashboard.
 - Per-domain timelines include daily volume, pass, fail, compliance-rate, and failure-rate rollups.
 - Domain reports can be exported to CSV for a selected date range.
+- Source reports include actionable recommendations for unknown sources, SPF-only passes, DKIM-only passes, full failures, and unenforced policies.
 
 Quality bar:
 - A domain owner can understand who sends mail as their domain, which sources fail, and what to fix next.

docs/milestones.md

@@ -82,8 +82,6 @@ Delivered:
 - Top sender/source reports with pass/fail breakdowns.
 - Per-domain report timeline and daily rollups.
 - Exportable reports for a selected domain and date range.
-
-Planned:
 - Clear recommendations for common cases: unknown source, SPF-only pass, DKIM-only pass, full fail, and policy not enforced.
 
 Exit criteria:

docs/todo.md

@@ -152,7 +152,7 @@ This file tracks the specific implementation tasks for each milestone of the DMA
 - [x] Add sender/source pass/fail totals
 - [ ] Add newly observed source detection
 - [x] Add exportable domain reports
-- [ ] Add actionable recommendations for common DMARC failure patterns
+- [x] Add actionable recommendations for common DMARC failure patterns
 
 ## Future Milestones
 - [ ] Production secret handling guide using 1Password injection