The 38-pattern emit-time blocklist covering 19 email domains at and bare variants operates across five defensive layers from Prevention through Verify