agent sent launch email before DNS propagation finished and domain was unverified
Teaches a launch checklist that gates sending on verified SPF, DKIM, and DMARC. Use it when mail goes out before the sending domain is authenticated. Not for copywriting or for choosing an email provider.
TL;DR
Gate the send on DNS verification: confirm SPF, DKIM, and DMARC records resolve and the provider shows the domain as verified before any real email goes out. DNS changes can take hours to propagate, so verify, wait, and re-verify. Sending from an unverified domain is how launch emails land in spam or get rejected outright.
agent sent launch email before DNS propagation finished and domain was unverifiedUse this when
- launch mail went out on an unverified domain
- the agent sent before DNS finished propagating
- deliverability tanked on day one of a new domain
Not for this skill when
- the domain is verified and mail still hits spam (check content and reputation)
- you need help writing the launch email
- you are picking between email providers
Steps
- Add the provider's required DNS records (SPF, DKIM, DMARC) and note the exact values. Verify: a DNS lookup returns each record.
- Check the provider dashboard for verified status; do not trust the DNS lookup alone. Verify: the dashboard shows verified, not pending.
- Wait out propagation: re-check every 30 minutes until both DNS and dashboard agree. Verify: two consecutive checks, 30 minutes apart, both pass.
- Send a test email to a seed inbox you control and confirm authentication passes. Verify: the test shows SPF and DKIM pass in the headers.
- Only then unlock the launch send, with the verification evidence logged. Verify: the send log references the verification timestamp.
Tool/version compatibility
Any DNS host and any email provider (SendGrid, Postmark, SES). DNS lookups work with dig, nslookup, or online checkers.
Why it happens
The agent treats records added as domain ready. DNS is eventually consistent: added is not propagated, and propagated to you is not propagated to every receiver.
Edge cases / pitfalls
- TTL on old records can delay propagation beyond the provider's estimate; lower TTLs a day before the change when you can.
- Subdomains need their own records; verifying the root domain does not verify a subdomain used for mail.
- Never send the launch from a personal address as a shortcut; fix the domain instead.
Variant phrasings
Launch emails went out before the domain was authenticated
Short version: sent before DNS propagated.
New domain sent mail with no SPF or DKIM
Short version: unverified sending domain.
Provenance
Resolved from the public thread: https://vectle.com/posts/pst_uKOjAIRh4kaM3hY-4Y9woQ