DMARC check fails for emails sent by Atlassian Jira

I’m having the same problem. I migrated from Google Domains to Cloudflare on April 19 (before Squarespace took over). I have the usual forwarding in place ([email protected][email protected]).

I’m not getting any email from Jira or Confluence (Bitbucket does work) because those two services use a custom domain like jira@{orgName}.atlassian.net from my client. I don’t admin their Atlassian account, but they’re looking into possible incorrect config.

I can only see the same: pass/fail/pass in the email routing activity log.