The owner's decision (2026-10-16, security review of panel-dkim-signing, F1): a Sender: line, shown beside From: as "on behalf of", is held to the same rule when a message has one. The topic says how a system that writes for people outside the server's domains does it instead (its own From:, the person in Reply-To:), and the Outbound log topic names Sender: among the refusals. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>