Add an integration/API that can monitor a tenant’s designated phishing mailbox (for example, phishing_reports@customer.com) via read‑only access in Google Workspace/Exchange, detect messages that match SAT phishing campaigns, and automatically mark those attempts as Reported with the usual learner/admin notifications. This would let partners keep using native or existing “Report phishing” flows and mail‑filter/SIEM buttons while still feeding SAT reporting, instead of forcing users onto a separate SAT‑specific button or workflow.