Gmail bounced 1,429 messages in a day: three broken auth mechanisms and a silent OpenDKIM

A relay with 753 days of uptime failed every Gmail delivery because SPF, DKIM and forward-confirmed reverse DNS were broken independently. The root cause of the DKIM half was one word: tables mounted as refile: instead of file:, which makes OpenDKIM drop the key lookup and sign nothing without logging a line.