The rule
Only one SPF TXT record should exist at each fully qualified name that sends mail (often the root domain or a subdomain label).
Merge strategy
Combine every authorized include, ip4, and other mechanisms into a single v=spf1 ... string that stays under DNS TXT size limits.
Verification
Query live DNS from multiple resolvers after edits—stale caches can hide duplicate TXT strings briefly.