Still harder than it seems

• if we allow s/c to mark a mail as nonspam, then we open a hole that spammers can exploit to get their mails marked as nonspam if we're not careful

• • spammers love these holes

• need to be careful about rule ordering: you can't exit early if you may be able to swing back in the opposite direction with a high-scoring rule later