DMARC applies to only part of mail
The DMARC pct tag is set below 100.
Why it matters
Only that percentage of failing mail is subject to the published policy.
What to do
Raise pct to 100 once you are confident the policy will not reject legitimate mail.
Reference
DMARC publishes policy for handling messages that fail SPF/DKIM alignment.