https://shipreadyai.dev/learn/findings/o10-spf-missing

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# No SPF record is published

Anyone can send mail that claims to come from your domain, and your own mail is more likely to land in spam.

## Why AI-built apps get this

Mail records live in DNS, not in your code, so no coding agent touches them. The result is a password reset that lands in spam and a domain anybody can send mail as. It is one of the few serious items on a result that is fixed entirely outside the app.

## Evidence line

no TXT record beginning v=spf1 found for example.com

## The fix

Add a TXT record at the root of the domain listing your sending services, for example v=spf1 include:yoursender.com -all. Observed: {value}.

## Prompt

The domain {domain} has no SPF record. Add a TXT record at the root listing the services that send mail for you, ending in -all.