Ok, the first option you mention is the case;
1. To tell SA that a mail is not spam you simply have to move it to your inbox.
1) how i move the false positive (SPAM) to the respective inbox and teach to SA that that mail is HAM.?
I'm from qmail with qmailscan/SA. so every received mail tagged as "quarantine" was delivered to the postmaster acount, this account was configured in my thunderbird so i know the mails that are in quarentine. So when sombody said to me that an email don't arrives, i search into the quarentine mails and make a manualy process to clean and inject the mail to the proper recipient.
with thus commands:
gate:/# cd /var/spool/qmailscan/quarantine/new
gate:/var/spool/qmailscan/quarantine/new# sa-learn --ham gate148966644872515427
Learned tokens from 1 message(s) (1 message(s) examined)
gate:/var/spool/qmailscan/quarantine/new# /var/qmail/bin/qmail-inject -email@example.com < gate148966644872515427
How i made that in mailcow, if necesary. That's my curiosity!
2) Where is the quarantine directory in mailcow?
Again, thank you for reading all this!