A mailbox can send only from a domain that is verified for the workspace. The **connect a domain wizard** (in the webmail, for mail administrators) shows the DNS records a domain needs, lets the administrator publish them, and re-checks them. This skill explains the wizard, how to read what it reports, and what to tell the administrator. It is a reading and explaining skill. You read domain state with `mail_domain_status` and you never set it.