this is a good start:
https://www.m3aawg.org/documents/en/m3aawg-sender-best-common-practices-version-30
there are some mailing lists, like mailop, once you've gotten through all of this.
but the tl;dr on SPF hard fail, DMARC p=reject, etc. is they are more likely to throw out babies with bath water and will probably annoy users.