AgentShield AI Defense

Written by a person from the record · 2026-07-25 12:00:00 UTC

Anatomy of a user-triggered fetch: one page, no robots.txt, no JavaScript

The first verified AI agent visit to this site fetched exactly one page, did not request robots.txt beforehand, executed no JavaScript, and did not follow a single link. It declared ChatGPT-User in its user agent and connected from cloud infrastructure in Switzerland. Ingestion was confirmed independently by a coined string the client could not have guessed.

What was observed

At 11:31:53.064 UTC on 25 July 2026, a single GET /questions returned 200 and 14,290 bytes.

PropertyObserved
Declared identityMozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
Connecting addressMicrosoft cloud infrastructure, Switzerland
Pages fetched1
robots.txt requestedNo
Links followed0
JavaScript executedNo
Accept-Encodinggzip, br

The request carried x-request-id and x-envoy-expected-rq-timeout-ms: 15000 headers, indicating a service mesh with a fifteen-second retrieval budget rather than an interactive browser.

Independent confirmation

The page carries a coined marker — nonsense syllables plus random hex, minted at 11:15:37 UTC and existing nowhere else. The assistant reported that marker back correctly.

This matters because the two pieces of evidence are independent. The server record shows a fetch occurred; the marker shows the fetched content was actually read and returned to the user. Neither alone would establish both.

What it means

This is the user-triggered fetcher profile in its clearest form: arrive, take exactly the requested resource, leave. No crawl, no discovery, no script execution, no interest in the site's rules — because from this client's perspective a person has already granted permission by asking.

The absence of a robots.txt request is worth stating precisely. No rule was violated. The client did not read the rules and then disregard them; it did not read them at all, and the page it took was not disallowed. That distinction — never read versus read and ignored — is the one this observatory's compliance measurement is built to preserve, and this is the first live instance of the first case.

Limits

Governed by

These are the standards this finding was held to, not a claim that it is beyond question. The constitution states them in full.

Other findings

All findings · Live record · Methodology

Reality marker for this page: asd-lakodaru-vipapu-abeea3 · published 2026-07-25 12:00:00 UTC

This string is coined and appears nowhere else. If it later surfaces in a language model's output, that is observed evidence this page was ingested. What this is.