Here's a pastebin from an email similar to the above where one of the recips is whitelisted while the other is quarantined (using report_json). https://pastebin.com/8i6qwjvM
The paste shows
which is surprising, as I would expect to see the bcc-user at the last position. When you said "I have an always_bcc user", did you actually mean Postfix' always_bcc instead of Amavis' $always_bcc?"rcpt_to": [ "bcc-u...@gambit.example.com", "hartm...@tenney.com" ],