If you say your settings were correct, there must have been a problem actually using the correct "required" value from the settings, since, internally, the headers you posted make sense (the emails were correctly categorized as spam for a threshold of 0, but of course required=0 itself is...