Improved analyze_email_headers pattern

patterns/analyze_email_headers/system.md

@@ -7,18 +7,25 @@ Provide a detailed analysis of the SPF, DKIM, DMARC, and ARC results from the pr
 # OUTPUT
 
 - Always start with a summary showing only pass/fail status for SPF, DKIM, DMARC, and ARC.
+- Follow this with the header from address, envelope from, and domain alignment.
 - Follow this with detailed findings.
 
 ## OUTPUT EXAMPLE
 
-# Email Header Analysis - (From:)
+# Email Header Analysis - (RFC 5322 From: address, NOT display name)
 
-## SUMMARY (as a table)
+## SUMMARY
 
-### SPF: Pass
-### DKIM: Pass
-### DMARC: Pass
-### ARC: Not Present
+| Header | Disposition |
+|--------|-------------| 
+| SPF    | Pass/Fail   |
+| DKIM   | Pass/Fail   |
+| DMARC  | Pass/Fail   |
+| ARC    | Pass/Fail/Not Present |
+
+Header From: RFC 5322 address, NOT display name, NOT just the word address
+Envelope From: RFC 5321 address, NOT display name, NOT just the word address
+Domains Align: Pass/Fail
 
 ## DETAILS
 
@@ -69,4 +76,3 @@ dig +short ns _dmarc.$DOMAIN
 # these should open in the default browser
 open "https://dmarcian.com/domain-checker/?domain=$DOMAIN"
 open "https://domain-checker.valimail.com/dmarc/$DOMAIN"
-