The core distinction

Pause when the cause of a problem is unknown or structural — something that will affect every message sent until it's fixed. Reduce volume, rather than stop entirely, when the system and cause are already understood and the goal is a controlled, diagnostic return to a known-good state.

Structural defects that demand a full stop

A malformed DKIM signature or a broken list-import process are structural: every message sent while the defect is active is affected the same way, and continuing to send at any volume just produces more failures without new information. These call for stopping entirely until the defect itself is fixed, not a smaller batch to 'test' around it.

Bounded issues where reducing volume makes sense

A mild rise in temporary deferrals following a schedule change is a different situation — the cause is plausibly identified (the schedule change), the effect is bounded (deferrals, not permanent failures or complaints), and a smaller diagnostic volume can confirm whether reverting or adjusting the schedule actually resolves it.

Comparing the two scenarios

One sender has a malformed DKIM signature combined with a list-import bug — two structural issues stacked together, calling for a full stop until both are fixed. Another sender sees only a mild rise in temporary deferrals after a schedule change — a single, bounded, already-suspected cause, where continuing at reduced volume to test the hypothesis is reasonable.

A decision checklist for the moment it happens

Ask two questions: is the cause identified, and is the failure mode bounded rather than compounding? If either answer is no — cause unknown, or the failure is structural and will affect everything — pause. If both answers are yes, a smaller volume aimed at testing the fix is the more useful next step than a full stop.

Why getting this wrong in either direction costs something

Pausing when a reduced, targeted batch would have answered the question just delays recovery unnecessarily. Continuing at full or reduced volume through a structural defect compounds the damage with every message sent. The two-sender comparison above is meant to make that distinction concrete rather than a judgment call made under pressure.

Document the decision, even working solo

Writing down what was observed, which option was chosen, and why — even briefly — makes the next similar decision faster and more consistent, and matters even more once more than one person touches the sending system. A pattern of undocumented pause/reduce calls made under pressure tends to drift toward whichever option feels easiest in the moment rather than the one the evidence actually supports.

A third option: stop new sequences, let in-flight finish

Depending on the cause, it can make sense to stop starting any new sequences while allowing already-scheduled, non-follow-up sends already in motion to complete — rather than either a full stop or a blanket volume reduction. This is most appropriate when the identified cause is specific to new campaign launches (like a bad new list source) rather than something affecting the sending domain as a whole.

Reviewing the decision after the fact

Once the situation is resolved, it's worth a brief look back at whether the chosen option (pause or reduce) was the right call given what was eventually learned about the cause. If a full pause turned out to be an overreaction to something that a smaller diagnostic batch would have clarified just as well, that's useful information for calibrating the next similar decision — and the reverse is equally useful if a reduced-volume approach turned out to be too cautious given how structural the actual cause was.

This kind of review doesn't need to be formal — a short note alongside the incident log is enough to build better judgment for next time, rather than re-deriving the same reasoning from scratch under pressure each time something goes wrong.

Why this distinction is worth having explicitly

Without a clear framework, this decision tends to default to whichever option feels less disruptive in the moment, regardless of what the actual cause calls for — often under-reacting to a structural problem or over-reacting to a bounded one. Having the two questions (is the cause known, is the failure bounded) as an explicit checkpoint keeps the decision grounded in the actual situation rather than in how urgent it feels.

This decision tends to get easier with practice — a team or individual sender who has worked through it a few times develops a faster, more reliable instinct for which category a new situation falls into, which is part of why documenting past decisions, as suggested above, pays off over time.

There's no shame in choosing the more conservative option (pausing) when genuinely uncertain which category a situation falls into — the cost of an unnecessary pause is almost always smaller than the cost of continuing to send through an unrecognized structural problem.

Field checklist

  • Pause entirely when the cause is unknown or the defect is structural and will affect every message.
  • Reduce to a smaller diagnostic volume only when the cause is already identified and the effect is bounded.
  • Treat a malformed authentication signature or a broken list import as a full-stop condition, not a reduce-and-test one.
  • Treat a mild, plausibly-caused deferral increase as a candidate for reduced-volume testing, not an automatic pause.
  • Ask whether the cause is known and whether the failure is bounded before choosing between the two options.
  • Avoid defaulting to either option out of habit — the right call depends on both questions, not just severity.

Primary sources

Standards and provider policies can change. These links are the reference points used for this field note.

  1. RFC 6376 — DKIM SignaturesIETF / RFC EditorDKIM signing and verification behavior.
  2. RFC 3463 — Enhanced Mail System Status CodesIETF / RFC Editor2.x.x, 4.x.x and 5.x.x delivery status code classes.
  3. Email sender guidelinesGoogle Gmail HelpAuthentication, TLS, DNS, spam-rate and bulk-sender requirements.