WHITELIST_OPENAI {
  type = "from";
  extract_from = "mime";          # or "smtp"
  filter = "email:domain";
  map = ["openai.com"];           # inline list
  prefilter = true;               # run early
  action = "accept";              # force accept on match
  description = "Whitelist OpenAI bounce/login emails";
}