RUA and RUF reports
The aggregate and forensic report addresses in a DMARC record.
RUA points mailbox providers to the address that should receive aggregate DMARC XML reports. RUF points to forensic failure reports, which many mailbox providers limit or do not send because they can expose message details. Most teams start with RUA reporting and use a DMARC monitor to parse it.
reading this as developers picking email infrastructure
The question here is which one a backend engineer would rather operate. That means SDK depth in the language already in use, whether a retry can safely be replayed, how much the event log tells you when a customer says the email never arrived, and whether the pricing curve stays sane as volume grows.
Applied to rua and ruf reports, that means weighing developer experience, SDK breadth, idempotency keys, and operating track record ahead of the rest, against password resets, receipts, and magic links shipped from application code.