AgentShield AI Defense

Methodology

What counts as evidence on this site, how it is collected, and where the method is weak.

Admissible evidence

One thing only: a request this server observed and recorded. Method, headers, timing, status, bytes. Records are written once and never modified, and they carry no verdicts — a stored judgement would overwrite the evidence needed to check it.

Inadmissible evidence

Model self-report. We do not prompt a language model about this site and record its answer as data. A model describing its own knowledge is the system under test testifying about itself; it can assert familiarity with pages it never read and deny ones it did. This exclusion rules out the common approach to AI visibility measurement, which is the point rather than an oversight.

Inference presented as observation. That a client "is a bot" is a conclusion. That a client sent a given User-Agent and fetched given paths at given times is an observation. Only the second is stored.

Interpretation is separate and versioned

Signals derived from observations are written to their own table, tagged with the version of the interpreter that produced them. Improving the interpreter means deleting the prior version's output and recomputing over the same untouched observations. A conclusion that cannot be re-derived from the record does not get published.

Known limits

Privacy

No cookies, no fingerprinting scripts, no cross-site tracking, no accounts. The unit of observation is a request. Published tables report user agents, paths, and counts — never anything that identifies a person.

Reproducing this

The instrument is a small server that records requests and a set of pages designed to make specific behaviours measurable: disallowed paths for compliance, a script-rendered page for JavaScript execution, several formats of identical content for format preference, and coined markers for ingestion. None of it requires special access. Any site owner can build the same thing.

Reality marker for this page: asd-radoka-zunutu-da2dbc · published 2026-07-25 10:35:25 UTC

This string is coined and appears nowhere else. If it later surfaces in a language model's output, that is observed evidence this page was ingested. What this is.