From f84a93d22a8f97193ef26b87f764988233ad843a Mon Sep 17 00:00:00 2001
From: Colin Stubbs <3059577+colin-stubbs@users.noreply.github.com>
Date: Wed, 20 Aug 2025 14:31:17 +1000
Subject: [PATCH 1/3] add goodroots.work caa_management

---
 goodroots.work.caa_management.json | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 goodroots.work.caa_management.json

diff --git a/goodroots.work.caa_management.json b/goodroots.work.caa_management.json
new file mode 100644
index 00000000..805cf81b
--- /dev/null
+++ b/goodroots.work.caa_management.json
@@ -0,0 +1,24 @@
+{
+  "providerId": "goodroots.work",
+  "providerName": "Good Roots Work",
+  "serviceId": "caa_management",
+  "serviceName": "CAA Policy Management",
+  "version": 1,
+  "logoUrl": "https://goodroots.work/goodroots.svg",
+  "description": "Provides tooling to manage error free RFC compliant best practice CAA policy records for a domain, subdomain or specific hostname.",
+  "variableDescription": "%host%: name for the CAA record, may be '@' for the domain apex, or a subdomain; %flags%: flags for the CAA record, typically 0, or 128 to indicate critical; %property%: property for the CAA record; %params%: property parameters, e.g. CA domain identifier and any additional parameters, or IODEF reporting URL;",
+  "syncBlock": false,
+  "syncPubKeyDomain": "caa.goodroots.work",
+  "multiInstance": false,
+  "warnPhishing": false,
+  "hostRequired": true,
+  "records": [
+      {
+          "groupId": "caa",
+          "type": "CAA",
+          "host": "%host%",
+          "data": "%flags% %property% \"%params%\"",
+          "ttl": 300
+      }
+  ]
+}
\ No newline at end of file

From e2bbe26a62d584fccdb609612a620f09adc80ad1 Mon Sep 17 00:00:00 2001
From: Colin Stubbs <3059577+colin-stubbs@users.noreply.github.com>
Date: Wed, 20 Aug 2025 16:32:45 +1000
Subject: [PATCH 2/3] update goodroots.work caa_management

---
 goodroots.work.caa_management.json | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/goodroots.work.caa_management.json b/goodroots.work.caa_management.json
index 805cf81b..118fdaac 100644
--- a/goodroots.work.caa_management.json
+++ b/goodroots.work.caa_management.json
@@ -6,19 +6,18 @@
   "version": 1,
   "logoUrl": "https://goodroots.work/goodroots.svg",
   "description": "Provides tooling to manage error free RFC compliant best practice CAA policy records for a domain, subdomain or specific hostname.",
-  "variableDescription": "%host%: name for the CAA record, may be '@' for the domain apex, or a subdomain; %flags%: flags for the CAA record, typically 0, or 128 to indicate critical; %property%: property for the CAA record; %params%: property parameters, e.g. CA domain identifier and any additional parameters, or IODEF reporting URL;",
+  "variableDescription": "%flags%: flags for the CAA record, typically 0, or 128 to indicate critical; %tag%: tag for the CAA record; %value%: value for the CAA record;",
   "syncBlock": false,
   "syncPubKeyDomain": "caa.goodroots.work",
   "multiInstance": false,
   "warnPhishing": false,
   "hostRequired": true,
   "records": [
-      {
-          "groupId": "caa",
-          "type": "CAA",
-          "host": "%host%",
-          "data": "%flags% %property% \"%params%\"",
-          "ttl": 300
-      }
+    {
+      "type": "CAA",
+      "host": "@",
+      "data": "%flags% %tag% \"%value%\"",
+      "ttl": 300
+    }
   ]
 }
\ No newline at end of file

From 1b4528a2efc47b1459645ec0ad303f4a6ad44e64 Mon Sep 17 00:00:00 2001
From: Colin Stubbs <3059577+colin-stubbs@users.noreply.github.com>
Date: Wed, 20 Aug 2025 22:04:07 +1000
Subject: [PATCH 3/3] remove unnecessary booleans, set multiInstance to true

---
 goodroots.work.caa_management.json | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/goodroots.work.caa_management.json b/goodroots.work.caa_management.json
index 118fdaac..62928d2f 100644
--- a/goodroots.work.caa_management.json
+++ b/goodroots.work.caa_management.json
@@ -7,11 +7,8 @@
   "logoUrl": "https://goodroots.work/goodroots.svg",
   "description": "Provides tooling to manage error free RFC compliant best practice CAA policy records for a domain, subdomain or specific hostname.",
   "variableDescription": "%flags%: flags for the CAA record, typically 0, or 128 to indicate critical; %tag%: tag for the CAA record; %value%: value for the CAA record;",
-  "syncBlock": false,
   "syncPubKeyDomain": "caa.goodroots.work",
-  "multiInstance": false,
-  "warnPhishing": false,
-  "hostRequired": true,
+  "multiInstance": true,
   "records": [
     {
       "type": "CAA",