Evidence a human can approve against

One delivered test email, checked once. The report lists every unique resource extracted from it — links and images — with its state, its evidence and its occurrence count, alongside the campaign-level outcome and the checks the run consumed. It is a working document for the person approving the send, not a score.

When a check run completes, the outcome is decided in strict order: any Broken resource marks the campaign Failed. Otherwise any Blocked or Inconclusive resource marks it Incomplete, and manual review is required before approval. Otherwise warnings roll the campaign up to Warning, and otherwise a completed run with Healthy resources is Passed — Protected items wait for manual review either way. A run that does not complete — an interruption, an internal error — is always Incomplete. There is no path to a silent pass.

Every attempted check records when it ran, how long it took, the redirect chain hop by hop, the final URL, and the HTTP status when a response was received — an explicit error code otherwise, so a timeout, a TLS failure and a safety block each leave a distinct trace.

Report views show URLs redacted: recognized token-like values — long mixed-alphanumeric segments, UUIDs, the segment after a sensitive keyword, and query values outside the five standard utm_* keys — are replaced with [REDACTED]. The canonical stored copies are encrypted at the application level. Redaction is pattern-based: it hides token-like values, not every conceivable secret shape — and the encryption of the canonical copies does not depend on it.

A report is also honest about its own limits. One attempted unique resource costs one check; items classified Protected at upload are never attempted and consume nothing, while a link that turned Protected mid-redirect was attempted and consumed its check. If the run needs more checks than the workspace allowance has left, the run is refused rather than silently shrunk: the report is explicitly marked Incomplete, with the unchecked items still listed — never a partial pass.