Without structured desktop control
- Sending a full list before testing SMTP connection
- Skipping SPF, DKIM, and DMARC validation
- No SpamAssassin pass on first template
- No pilot batch — reputation damage on launch day
- Provider credentials scattered in notes instead of profiles
