chore: sync GovOPlaN module split state

docs/CAMPAIGN_DELIVERY_RUNBOOK.md

@@ -15,6 +15,8 @@ been validated, built, reviewed, and locked.
 ## Before First Live Use
 
 - Use dedicated non-production SMTP/IMAP credentials.
+- Start the repository test bed in `dev/mail-testbed/` when a local
+  production-like SMTP/IMAP server is sufficient.
 - Use a dedicated mailbox/folder for append-to-Sent tests.
 - Confirm policy allows the SMTP host, envelope sender, recipients, and optional
   IMAP append target.
@@ -23,6 +25,23 @@ been validated, built, reviewed, and locked.
 - Keep the report page open during tests; it is the operational source of truth
   for attempts, outcomes, and reconciliation.
 
+## Deliverability Preflight
+
+Before the first live send for a sender domain or mail-server profile:
+
+- Confirm the selected SMTP identity matches the visible From/envelope sender
+  policy.
+- Confirm SPF, DKIM, and DMARC are handled by the sending infrastructure or
+  documented as out of scope for the selected test environment.
+- Confirm rate limits are explicitly set for the expected provider and recipient
+  volume.
+- Confirm bounce/reply/notification addresses are monitored by an operational
+  mailbox or intentionally disabled.
+- Confirm large attachments and password-protected ZIPs are acceptable for the
+  recipient systems.
+- Confirm owner transfer or policy changes force profile reselection and
+  revalidation before live delivery.
+
 ## Queue And Send
 
 1. Validate the version with file checks enabled.
@@ -73,5 +92,7 @@ bed where possible:
 - Accepted and unknown jobs must not appear in retry selections.
 - Reconciled accepted jobs must remain protected from resend.
 - Reconciled not-sent jobs must appear only as explicit retry candidates.
-- The final report should include SMTP attempts, IMAP append attempts, and any
-  reconciliation notes before the campaign is considered operationally closed.
+- The final CSV export should include message id, resolved envelope headers,
+  attachment evidence, EML reference/checksum, latest SMTP response/error, and
+  latest IMAP folder/error before the campaign is considered operationally
+  closed.