Putting the three dig commands before the send is the right order, since a broken DMARC record wastes a whole campaign quietly. One thing I'd add is a check on the list itself. A clean domain still bounces if half the addresses are stale, so a small test batch before scaling is worth it. If you need a fresh list of companies on a specific tool, https://stackshortlist.dev is what I built for that.