Gmail sees the SPF record now, but a password reset request still went to the Spam folder. /shrug
Received-SPF: pass (google.com: domain of
permies@permies.com designates 64.78.181.87 as permitted sender) client-ip=64.78.181.87;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of
permies@permies.com designates 64.78.181.87 as permitted sender) smtp.mail=permies@permies.com
I'll keep marking them Not Spam and see what happens.