Catch-all email addresses bounce 27x more than verified ones. A risk framework for when to send, skip, or test catch-all contacts.