Explain what each authentication result actually means

My report says DMARC=fail and I had to google what that implies. A short glossary or inline note for SPF/DKIM/DMARC pass/fail would make it usable by non-technical complainants.