2 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
DMARC adkim= tag for a domain: DKIM alignment mode (r relaxed / s strict). Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the adkim value (or that it is absent, with the default that then applies)...
Change watch for dmarc tag adkim: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with be...