A DNS TXT record listing the servers authorised to send email for a domain. Receiving servers check the connecting IP address against the record and record a pass or fail. SPF validates the envelope sender (return-path), not the From header users see, and it breaks on plain forwarding — which is why it is combined with DKIM under a DMARC policy.
SPF
Sender Policy Framework