• wraps email check now reports BIMI: record status, logo and VMC validation, a generated default._bimi.<domain> TXT template, and which inboxes require a VMC or CMC versus which show a self-asserted logo. When DMARC is not yet at enforcement it says so instead of printing setup steps that cannot work yet
• Fix: eventTracking.events was declared, threaded through the stack, and never read. Every deployment sent the same hardcoded ten event types to SES, so dropping OPEN and CLICK to stop engagement tracking reported success and did nothing. The configured list is now what SES gets
• BOUNCE and COMPLAINT can no longer be dropped from an event destination. A suppression-list event arrives as a bounce, so losing either leaves your pipeline blind to both
• The custom config prompt gained a real event-type multiselect, and the Production preset no longer carries its own stale eight-type list
• Fix: the deployed IAM policy grants ses:ListConfigurationSets, so configuration-set discovery works
• BIMI asset fetching is opt-in, keeping the public tools API off attacker-supplied URLs

CLI v3.1.0