https://shipreadyai.dev/learn/findings/o10-dmarc-missing

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# No DMARC record is published

Receiving servers have no instruction for mail that fails the checks, so forged mail from your domain is more likely to be delivered.

## Why AI-built apps get this

Mail records live in DNS, not in your code, so no coding agent touches them. The result is a password reset that lands in spam and a domain anybody can send mail as. It is one of the few serious items on a result that is fixed entirely outside the app.

## Evidence line

no TXT record beginning v=spf1 found for example.com

## The fix

Add a TXT record at _dmarc on your domain, starting with v=DMARC1; p=none; and a reporting address, then tighten it later. Observed: {value}.

## Prompt

The domain {domain} has no DMARC record. Add a TXT record at _dmarc.{domain} starting with v=DMARC1; p=none; and a reporting address, then tighten it once reports look clean.