From b7823253a4391d6a7663e4ad88a2c4b098384767 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 9 Jan 2026 15:15:50 +0000
Subject: [PATCH] Fix SMTP TLS report policy domain extraction

Co-authored-by: seanthegeek <44679+seanthegeek@users.noreply.github.com>
---
 parsedmarc/google_secops.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parsedmarc/google_secops.py b/parsedmarc/google_secops.py
index 67d8d84..b61ad50 100644
--- a/parsedmarc/google_secops.py
+++ b/parsedmarc/google_secops.py
@@ -445,7 +445,7 @@ class GoogleSecOpsClient:
             end_date = smtp_tls_report["end_date"]
             
             for policy in smtp_tls_report.get("policies", []):
-                policy_domain = policy["policy"]["policy_domain"]
+                policy_domain = policy["policy_domain"]
                 
                 for failure in policy.get("failure_details", []):
                     # Build UDM event for each failure