# Email Delivery Hardening Implementation Plan

1. Add failing contact-form tests for folded CRLF email/name values.
2. Add a failing feature test for a five-per-minute contact-mail limit.
3. Implement `SafeMailHeader` and apply it to contact header inputs.
4. Define and attach the named `contact-mail` limiter.
5. Upgrade Laravel/Symfony and regenerate `composer.lock`.
6. Run focused tests, strict architecture audit, the full suite, Composer audit, and change-impact review.