Mail Domain Check Guides

Mail Domain Check GuidesEvidence-led guides for email authentication, transactional delivery, and sender operations.https://mailcheck.agentcartai.com/guides/2026-07-30T00:00:00ZMail Domain CheckBetter Auth Verification Email Not Receivedhttps://mailcheck.agentcartai.com/guides/better-auth-verification-email-not-received/2026-07-30T00:00:00Z2026-07-30T00:00:00Z

An evidence-led incident path for Better Auth verification, password reset, magic-link, and email OTP messages.

Resend Webhook Bounce and Complaint Correlationhttps://mailcheck.agentcartai.com/guides/resend-webhook-bounce-complaint-message-id/2026-07-30T00:00:00Z2026-07-30T00:00:00Z

A safe operational guide for correlating Resend bounce, failed, suppressed, complained, sent, and delivered webhooks with application notifications.

OTP Email Sent Before Code Is Persistedhttps://mailcheck.agentcartai.com/guides/otp-email-sent-before-code-persisted/2026-07-29T00:00:00Z2026-07-29T00:00:00Z

A developer incident path for verification and OTP systems that send a message before the pending account, code generation, or verification lookup state is durable.

Cloudflare Email Routing vs Email Sendinghttps://mailcheck.agentcartai.com/guides/cloudflare-email-routing-vs-email-sending-workers-binding/2026-07-21T00:00:00Z2026-07-27T00:00:00Z

A current architecture guide for inbound Email Routing, restricted verified-destination sending, and outbound Email Sending through Workers, REST, or SMTP.

阿里云 ECS 公网 IP 如何配置 PTR 反向解析https://mailcheck.agentcartai.com/guides/alibaba-cloud-ecs-ptr-reverse-dns/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

确认阿里云 ECS 静态公网 IPv4 与 EIP 的 PTR 支持范围，完成正向 A、反向 PTR、所有权验证和正反向一致性检查。

Authentik ak test_email ResultTimeout: Find the Real SMTP Error in Worker Logshttps://mailcheck.agentcartai.com/guides/authentik-test-email-resulttimeout-worker-smtp-error/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A source-verified diagnostic path that separates Authentik command waiting, background worker execution, SMTP backend errors, provider outcomes, and receiver evidence.

Ghost + Postmark: Verify the Newsletter From, Not Only the Fallbackhttps://mailcheck.agentcartai.com/guides/ghost-postmark-newsletter-from-sender-signature/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A source-backed release gate for Ghost newsletter From identities, Postmark Sender Signatures or verified domains, message streams, and exact API errors.

Keycloak Realm SMTP Settings Were Losthttps://mailcheck.agentcartai.com/guides/keycloak-lost-realm-smtp-email-settings/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A repository-specific and source-backed recovery path for a Keycloak realm whose SMTP settings disappeared, covering authoritative configuration, connection testing, receiver evidence, and a real password-reset workflow.

Plane SMTP test email returns 500 before settings are savedhttps://mailcheck.agentcartai.com/guides/plane-smtp-test-email-500-unsaved-settings/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A source-backed repair for Plane's unsaved SMTP form and persisted EMAIL_PORT boundary.

Microsoft 554 5.2.252 SendAsDenied: System SMTP Account, User Fromhttps://mailcheck.agentcartai.com/guides/smtp-554-5-2-252-sendasdenied-system-account-user-from/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A source-verified repair for application mail rejected when the SMTP credential owner and visible From mailbox differ.

Supabase Signup emailRedirectTo Loses the Repository Pathhttps://mailcheck.agentcartai.com/guides/supabase-signup-email-redirectto-path-ignored/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A source-verified diagnostic for Supabase signup confirmation links that fall back from a GitHub Pages repository path to the site root.

Supabase Signup Says Email Sent for an Existing Verified Addresshttps://mailcheck.agentcartai.com/guides/supabase-signup-existing-verified-email-no-confirmation-sent/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A source-verified repair for Supabase signup interfaces that claim a confirmation message was sent after a protected duplicate-user response.

Verification Email Link Opens Raw JSON After Successhttps://mailcheck.agentcartai.com/guides/verification-email-link-opens-raw-json-api/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A source-verified repair for verification emails that send people directly to a state-changing JSON API instead of a human completion page.

ZITADEL Login V2 Registration Skips Email Verificationhttps://mailcheck.agentcartai.com/guides/zitadel-login-v2-registration-skips-email-verification/2026-07-25T00:00:00Z2026-07-25T00:00:00Z

A source-verified diagnostic and release gate for ZITADEL Login V2 self-registration that completes without email verification.

Mutt Says No Authenticators Available on Termuxhttps://mailcheck.agentcartai.com/guides/mutt-no-authenticators-available-termux-smtp/2026-07-24T00:00:00Z2026-07-25T00:00:00Z

A source-verified diagnostic path for Mutt embedded SMTP on Termux that distinguishes SASL plugin file presence from the current PLAIN and LOGIN plugins' libcrypt runtime dependency.

Verification Email API Returns 200 or 202 but Nothing Arriveshttps://mailcheck.agentcartai.com/guides/verification-email-api-200-but-not-received/2026-07-19T00:00:00Z2026-07-25T00:00:00Z

A developer incident path for tracing a received code to the same pending account and proving whether verification work crossed the application, durable queue, provider, SMTP, and receiver boundaries.

Authentik Uses Mailpit in Staging: Launch a Real SMTP Relay Safelyhttps://mailcheck.agentcartai.com/guides/authentik-mailpit-staging-to-production-smtp-relay/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified release gate for moving Authentik email from Mailpit to a real SMTP relay across Helm, Flux, Kubernetes, provider, DNS, and receiver boundaries.

Confirmation Email 429 Behind Docker and IPv6https://mailcheck.agentcartai.com/guides/confirmation-email-429-docker-ipv6-proxy-rate-limit/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified incident path for client-IP collapse, rate-limit observability, truthful throttling, durable confirmation handoff, and final receiver evidence.

Django Password Reset Returns 500 for a Registered Emailhttps://mailcheck.agentcartai.com/guides/django-password-reset-500-registered-email/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified diagnostic path for Django password reset that returns a generic success for an unknown address but 500 for a matching registered account.

Django Post Office 3.11.2: SMTP 421 Too Many Connectionshttps://mailcheck.agentcartai.com/guides/django-post-office-3-11-2-smtp-too-many-connections/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified capacity model for SMTP 421 failures caused by thread, process, scheduler, and replica concurrency after Django Post Office 3.11.2.

DKIM Record Exists, but Authentication-Results Says dkim=nonehttps://mailcheck.agentcartai.com/guides/dkim-record-exists-but-authentication-results-none/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-backed way to diagnose a published DKIM key while fresh mail still has no DKIM-Signature and the receiver reports dkim=none, including OpenDKIM InternalHosts and Postfix Milter boundaries.

GLPI Technician Notification Creates No Queue Rowhttps://mailcheck.agentcartai.com/guides/glpi-technician-notification-no-queue-row/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified diagnostic path for GLPI 11 technician notifications that separates ticket assignees, linked-item technicians, queue insertion and mail delivery.

Keycloak Verification Link Returns 500 After Restarthttps://mailcheck.agentcartai.com/guides/keycloak-verification-email-link-500-after-restart/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified diagnostic and regression path for Keycloak 26.7.0 verify-email links opened in a fresh browser after a server restart.

Password Expiry Email Was Not Resent After an SMTP Failurehttps://mailcheck.agentcartai.com/guides/password-expiry-email-not-resent-after-smtp-failure/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified recovery design for password-expiry notifications dropped after immediate SMTP retries, with durable semantic intents, freshness checks, supersession, and bounded retry.

Quote Email Fails with a Provider Configuration Errorhttps://mailcheck.agentcartai.com/guides/quote-email-provider-configuration-error-pdf-attachment/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

An evidence-led workflow for quote or invoice email failures involving PDF generation, message validation, attachment size, provider handoff, delivery events, and recipient visibility.

Rails Devise Password Reset Email Not Received in Gmailhttps://mailcheck.agentcartai.com/guides/rails-devise-password-reset-email-not-received-gmail/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified diagnostic path for a Rails 7.2 and Devise 4.9 password reset across private account mapping, synchronous Action Mailer delivery, provider events, Gmail acceptance, and reset-link use.

Resend DKIM Public Key Is Empty while DMARC Is p=rejecthttps://mailcheck.agentcartai.com/guides/resend-dkim-public-key-empty-dmarc-reject/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

Diagnose a Resend domain whose DKIM TXT record has an empty p= value, Return-Path records are missing, and strict DMARC reject can block important mail.

Roundcube Multi-Domain: AUTHENTICATE PLAIN Authentication Failedhttps://mailcheck.agentcartai.com/guides/roundcube-multi-domain-authenticate-plain-failed/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A source-verified diagnostic path for Roundcube 1.6.17 multi-domain IMAP authentication and reconnect failures.

Stalwart Hostname Conflicts with an Amazon SES MAIL FROM Domainhttps://mailcheck.agentcartai.com/guides/stalwart-hostname-conflicts-with-amazon-ses-mail-from/2026-07-24T00:00:00Z2026-07-24T00:00:00Z

A DNS-role preflight for separating mailbox MX, SMTP host, PTR, Return-Path, DKIM, and DMARC before a Stalwart cutover.

SMTP Is in .env, but Docker Compose Password Reset Email Is Not Senthttps://mailcheck.agentcartai.com/guides/docker-compose-smtp-env-not-passed-password-reset/2026-07-21T00:00:00Z2026-07-24T00:00:00Z

A source-verified diagnostic path for Docker Compose SMTP variables, optional authentication, running-container state, and password-reset delivery.

Supabase Auth with Brevo: SMTP Account Is Not Yet Activatedhttps://mailcheck.agentcartai.com/guides/supabase-brevo-smtp-account-not-activated/2026-07-19T00:00:00Z2026-07-22T00:00:00Z

A focused incident path for a Supabase Auth 500 paired with Brevo's SMTP account activation error.

Certificate Renewal Succeeded, but SMTP Notification Failedhttps://mailcheck.agentcartai.com/guides/certificate-renewal-succeeded-smtp-notification-failed/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

A source-verified repair path for certificate renewal that commits successfully but is reported as failed when an optional SMTP notification throws.

Cloudflare Email Service: Proofpoint 554 Blockedhttps://mailcheck.agentcartai.com/guides/cloudflare-email-service-proofpoint-554-blocked/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

An evidence-led response path for a Proofpoint 554 rejection of a Cloudflare Email Service shared outbound IP.

Contact Form Says Sent, but No Request Was Madehttps://mailcheck.agentcartai.com/guides/contact-form-says-sent-no-request-no-email/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

An evidence-led repair path for a contact form that simulates success without a request, durable intake, or a real notification workflow.

Contact Form Submission Saved, but Notification Email Is Missinghttps://mailcheck.agentcartai.com/guides/contact-form-submission-saved-but-notification-email-missing/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

A source-verified repair path for contact-form intake that succeeds while the administrator notification is skipped, coupled to visitor identity, or fails later in delivery.

Nodemailer 535 Authentication Failed in a Payload / Next.js Buildhttps://mailcheck.agentcartai.com/guides/nodemailer-535-authentication-failed-payload-nextjs-build/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

An evidence-led incident path for EAUTH and SMTP 535 during Payload configuration import or a Next.js production build.

Registration Returns 500, but the Account Was Createdhttps://mailcheck.agentcartai.com/guides/registration-returns-500-but-account-created/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

A source-verified state model for preventing optional verification-token or email failures from rewriting a committed account as a failed registration.

Spring Boot Says Verification Email Sent, but No Email Was Senthttps://mailcheck.agentcartai.com/guides/spring-boot-registration-says-verification-email-sent-but-no-email/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

A source-verified release gate for Spring Boot registration, hashed verification codes, transaction-aware asynchronous email, durable retries, truthful API wording, and single-use verification.

Stellar Horizon Payment Confirmation and Receipt Email Retryhttps://mailcheck.agentcartai.com/guides/stellar-horizon-payment-confirmation-receipt-email-retry/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

An evidence-led state model for Stellar payment confirmation, Horizon retry policy, idempotent receipt jobs, provider acceptance, and recipient delivery.

Symfony Mailer Uses mailer.transports but No Email Arriveshttps://mailcheck.agentcartai.com/guides/symfony-mailer-transports-ignores-dsn-no-email/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

A source-verified incident path for Symfony Mailer when the configured DSN appears correct, the transport service is plural, and no message reaches the recipient.

Ticket Requester Receives the Creation Email but Not the Resolutionhttps://mailcheck.agentcartai.com/guides/ticket-requester-receives-creation-email-but-not-resolution/2026-07-21T00:00:00Z2026-07-21T00:00:00Z

A source-verified recipient-routing path for ticket systems where creation receipts and resolution notifications reach different actors.

Separate Sending Domain Launch Checklisthttps://mailcheck.agentcartai.com/guides/separate-sending-domain-spf-dkim-dmarc-warmup/2026-07-20T00:00:00Z2026-07-21T00:00:00Z

A practical evidence checklist for launching a dedicated sending domain or mailbox plus transactional sender with provider-owned SPF, DKIM, DMARC, PTR, warmup, inbox-placement, bounce, complaint, and rollback controls.

First Email Arrived, Later Transactional Emails Are Missinghttps://mailcheck.agentcartai.com/guides/first-email-arrives-later-transactional-emails-missing/2026-07-20T00:00:00Z2026-07-20T00:00:00Z

A practical boundary map for missing later versions, follow-up message types, and attachments when the first transactional email arrived.

Outlook 550 5.7.1 S3150 Block-List Rejectionhttps://mailcheck.agentcartai.com/guides/outlook-550-5-7-1-s3150-block-list/2026-07-20T00:00:00Z2026-07-20T00:00:00Z

A sender-side response path for Microsoft consumer-mail rejection caused by an outbound sending IP block-list verdict.

SMTP 250 Accepted, but the Email Later Bouncedhttps://mailcheck.agentcartai.com/guides/smtp-250-accepted-but-email-bounced/2026-07-20T00:00:00Z2026-07-20T00:00:00Z

A sender-side design for reporting synchronous SMTP submission and asynchronous per-recipient delivery status without calling relay acceptance final delivery.

Auth0 Verification Email Not Receivedhttps://mailcheck.agentcartai.com/guides/auth0-verification-email-not-received/2026-07-19T00:00:00Z2026-07-19T00:00:00Z

An evidence-led incident path for missing Auth0 verification, reset, passwordless, and OTP messages.

AWS Cognito Verification Email Not Receivedhttps://mailcheck.agentcartai.com/guides/aws-cognito-verification-email-not-received/2026-07-19T00:00:00Z2026-07-19T00:00:00Z

An evidence-led incident path for missing AWS Cognito signup, confirmation, invitation, and password-reset email.

Crypto Wallet Verification Email Not Received in Outlookhttps://mailcheck.agentcartai.com/guides/crypto-wallet-verification-email-not-received-outlook/2026-07-19T00:00:00Z2026-07-19T00:00:00Z

A sender-side incident path for wallet login and OTP email that reaches Gmail but not Outlook, Hotmail, or Live recipients.

Firebase Auth Verification Email Not Receivedhttps://mailcheck.agentcartai.com/guides/firebase-auth-verification-email-not-received/2026-07-19T00:00:00Z2026-07-19T00:00:00Z

An evidence-led incident path for missing Firebase Authentication verification, password-reset, and email-link messages.

Resend Delivered but Email Not Receivedhttps://mailcheck.agentcartai.com/guides/resend-delivered-but-not-received/2026-07-19T00:00:00Z2026-07-19T00:00:00Z

An evidence-led incident path for missing verification, login, and transactional email sent through Resend.

Supabase Auth Email Not Receivedhttps://mailcheck.agentcartai.com/guides/supabase-auth-email-not-received/2026-07-19T00:00:00Z2026-07-19T00:00:00Z

An evidence-led incident path for missing Supabase Auth confirmation, magic-link, OTP, invite, and recovery email.

Web3 Verification Email Not Arrivinghttps://mailcheck.agentcartai.com/guides/web3-verification-email-not-arriving/2026-07-19T00:00:00Z2026-07-19T00:00:00Z

A sender-side incident workflow for missing wallet login, 2FA, password-reset, and transaction email.

Crypto phishing email header checkhttps://mailcheck.agentcartai.com/guides/crypto-phishing-email-header-check/2026-07-18T00:00:00Z2026-07-18T00:00:00Z

An evidence-based workflow for suspicious wallet alerts, exchange notices, DAO messages, and token emails.

Web3 DMARC Enforcement Checklisthttps://mailcheck.agentcartai.com/guides/web3-dmarc-enforcement-checklist/2026-07-18T00:00:00Z2026-07-18T00:00:00Z

A practical sender-side checklist for moving Web3 transactional email from DMARC monitoring to enforcement.

Web3 email security checkhttps://mailcheck.agentcartai.com/guides/web3-email-security/2026-07-18T00:00:00Z2026-07-18T00:00:00Z

Free Web3 email security check for wallet alerts, governance notices, transactional email, and newsletters. Verify SPF, DKIM, DMARC, PTR, and MTA-STS without a login.

如何找到 DKIM selectorhttps://mailcheck.agentcartai.com/guides/dkim-selector/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

解释 DKIM selector 的作用、如何从服务商或邮件头找到 selector，以及正确的 DNS 验证方法。

DMARC p=none 应该何时升级https://mailcheck.agentcartai.com/guides/dmarc-p-none/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

解释 DMARC p=none、quarantine、reject 的差异，以及从监控策略安全升级的验证步骤。

Gmail 451 4.7.23: fix the sending IP PTR rate limithttps://mailcheck.agentcartai.com/guides/gmail-451-4-7-23-ptr-rate-limit/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Fix Gmail 451 or 421 4.7.23 temporary PTR rate limits. Check the actual sending IPv4 or IPv6 address for reverse DNS and matching forward A or AAAA records.

Fix Gmail 4.7.24 or 5.7.24 suspicious SPF entrieshttps://mailcheck.agentcartai.com/guides/gmail-451-4-7-24-spf-suspicious/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Fix Gmail 451 4.7.24 or 550 5.7.24 suspicious SPF entries. Check duplicate records, broken include or redirect targets, broad policies, ptr, and the 10-query limit.

Gmail 4.7.32 / 5.7.32：From 未与 SPF 或 DKIM 对齐https://mailcheck.agentcartai.com/guides/gmail-5-7-32-dmarc-alignment/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Gmail 4.7.32 / 5.7.32 DMARC alignment 排查指南：核对 From、SPF MAIL FROM 与 DKIM d= 域，修复自定义回信域或 DKIM 签名域。

Gmail 550 5.7.25：PTR record 缺失或正反向不匹配https://mailcheck.agentcartai.com/guides/gmail-550-5-7-25-ptr-record/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Gmail 550 5.7.25 PTR record 排查指南：从退信提取发送 IP，核对反向 PTR 与正向 A/AAAA 是否互相匹配，并确认配置责任方。

Gmail 550 5.7.26：邮件未通过身份认证https://mailcheck.agentcartai.com/guides/gmail-550-5-7-26-unauthenticated-email/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Gmail 550 5.7.26 未通过身份认证的排查顺序：区分 SPF hard fail、SPF/DKIM 都未通过和 DMARC policy 拒绝。

Gmail 550 5.7.27：SPF authentication failedhttps://mailcheck.agentcartai.com/guides/gmail-550-5-7-27-spf-failed/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Gmail 550 5.7.27 SPF authentication failed 排查指南：核对发送 IP、MAIL FROM、SPF 授权路径与 10 次 DNS 查询限制。

Gmail 550 5.7.29：邮件没有通过 TLS 连接发送https://mailcheck.agentcartai.com/guides/gmail-550-5-7-29-tls-required/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Gmail 550 5.7.29 TLS required 排查指南：定位未加密的出站 SMTP 跳点，检查 STARTTLS 协商、网关回退与邮件服务商日志。

Gmail 550 5.7.30：DKIM authentication failedhttps://mailcheck.agentcartai.com/guides/gmail-550-5-7-30-dkim-failed/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Gmail 550 5.7.30 DKIM authentication failed 排查指南：从真实邮件头提取 d= 与 s=，核对公钥、签名域和发送后改写。

Gmail 550 5.7.40：DMARC record or policy missinghttps://mailcheck.agentcartai.com/guides/gmail-550-5-7-40-dmarc-policy/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Gmail 550 5.7.40 DMARC record or policy missing 排查指南：识别 Author Domain，按 RFC 9989 检查直接记录和父域策略。

Gmail 与 Yahoo 批量发件要求https://mailcheck.agentcartai.com/guides/gmail-yahoo-bulk-sender-requirements/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Gmail 与 Yahoo 批量发件要求检查表：SPF、DKIM、DMARC 对齐、PTR、TLS、投诉率和一键退订。

MTA-STS 与 TLS-RPT 的组成https://mailcheck.agentcartai.com/guides/mta-sts/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

MTA-STS 与 TLS-RPT 配置指南：DNS 公告、HTTPS policy、mode、MX 模式和报告地址检查。

No DMARC record found：未找到 DMARC 记录https://mailcheck.agentcartai.com/guides/no-dmarc-record-found/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

No DMARC record found 的含义与修复顺序：检查 _dmarc TXT、父域策略继承、RFC 9989 p 与 t 标签和聚合报告。

Outlook 高量发件要求https://mailcheck.agentcartai.com/guides/outlook-high-volume-sender-requirements/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

Outlook.com 每日超过 5,000 封邮件的发件域要求：SPF、DKIM、DMARC 对齐、550 5.7.515 与修复顺序。

SPF PermError：SPF 的 10 次 DNS 查询限制https://mailcheck.agentcartai.com/guides/spf-10-lookup-limit/2026-07-17T00:00:00Z2026-07-17T00:00:00Z

解释 SPF 10 次 DNS 查询限制、include 与 redirect 预算、PermError 风险及安全修复顺序。