Instead of scraping pmta show queue , implement a streaming collector:
Group bounces by env_to domain + dsn code. If example.com shows 50% 4.7.1 (TLS required), your PMTA needs tls-level=require for that domain. powermta monitoring better