DMARC
Domain-based Message Authentication, Reporting, and Conformance—a policy framework for email authentication.
DMARC tells receivers what to do when SPF or DKIM fails and sends you aggregate reports. Start with p=none to monitor, then tighten to quarantine or reject.