{ "study": "Websites for the AI Era", "study_version": "1.1", "register_version": "1.0", "last_checked": "2026-10-31", "grades": { "E1": "Official standard, regulation or primary research", "E2": "Independent measured research", "E3": "Vendor-reported or self-reported data", "E4": "Secondary reporting or estimate", "E5": "Sysbot interpretation or hypothesis" }, "counts": { "N_CLAIMS_V10": 143, "N_V10_YES": 104, "N_V10_PARTLY": 24, "N_V10_NO": 4, "N_V10_UNREACHED": 11, "N_CLAIMS": 146, "N_SOURCES": 139, "N_INTERP": 12, "N_E1": 33, "N_E2": 17, "N_E3": 48, "N_E4": 48, "N_CONFIRMED": 111, "N_CAVEAT": 23, "N_NOTCONF": 1, "N_UNREACHED": 11, "N_UPGRADES": 30 }, "claims": [ { "id": "C001", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "**Answer engines are now the default search experience.** Google said at I/O in May 2026 that AI Overviews reach more than 2.5 billion monthly users and AI Mode passed 1 billion.", "link_text": "more than 2.5 billion monthly users", "source": "blog.google", "url": "https://blog.google/innovation-and-ai/sundar-pichai-io-2026/", "source_date": "2026-05-19", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"AI Overviews now has over 2.5 billion monthly active users\"; AI Mode \"surpassed 1 billion\"", "original_source": "", "limitation": "Google's own I/O keynote blog post by Sundar Pichai; figures are monthly active users as reported by Google.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C002", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Overviews appear on roughly a fifth of searches, 18% in Pew's March 2025 sample and over 20% per Similarweb in June 2026.", "link_text": "18% in Pew's March 2025 sample", "source": "pewresearch.org", "url": "https://www.pewresearch.org/short-reads/2025/07/22/google-users-are-less-likely-to-click-on-links-when-an-ai-summary-appears-in-the-results/", "source_date": "2025-07-22", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "\"Some 18% of all the Google searches in our study generated an AI summary\"", "original_source": "", "limitation": "Sample is browsing data from about 900 US adults during March 1-31, 2025.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C003", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Overviews appear on roughly a fifth of searches, 18% in Pew's March 2025 sample and over 20% per Similarweb in June 2026.", "link_text": "over 20% per Similarweb in June 2026", "source": "aisearch.similarweb.com", "url": "https://aisearch.similarweb.com/blog/zero-click-marketing/", "source_date": "2026-06-10", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "AI Overviews \"now appear on more than 20% of all queries\"", "original_source": "", "limitation": "June 2026 is the article date; the page gives no specific measurement month for the 20% figure.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C004", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Pew Research", "link_text": "Pew Research", "source": "pewresearch.org", "url": "https://www.pewresearch.org/short-reads/2025/07/22/google-users-are-less-likely-to-click-on-links-when-an-ai-summary-appears-in-the-results/", "source_date": "2025-07-22", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "Clicked a result link in 8% of visits with AI summary vs 15% without", "original_source": "", "limitation": "Source-table reference only; page is the Pew study as described.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C005", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Ahrefs", "link_text": "Ahrefs", "source": "ahrefs.com", "url": "https://ahrefs.com/blog/ai-overviews-reduce-clicks-update", "source_date": "2026-02-04", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "AI Overview presence \"correlates with a 58% lower average clickthrough rate\" for position one", "original_source": "", "limitation": "300k keywords, GSC desktop CTR, Dec 2023 vs Dec 2025; authors describe it as correlation, not causation.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C006", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Seer Interactive", "link_text": "Seer Interactive", "source": "seerinteractive.com", "url": "https://www.seerinteractive.com/insights/aio-impact-on-google-ctr-2026-update", "source_date": "2026-04-24", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "Organic CTR with AIO fell 3.19% (Jan 2025) to 1.31% (Dec 2025); uncited brands down 67%", "original_source": "", "limitation": "53 brands, 5.47M queries, Jan 2025 to Feb 2026; agency client data, not a general-web sample.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C007", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Similarweb / SparkToro", "link_text": "Similarweb / SparkToro", "source": "aisearch.similarweb.com", "url": "https://aisearch.similarweb.com/blog/zero-click-marketing/", "source_date": "2026-06-10", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "Clickstream data \"shared with Rand Fishkin of SparkToro for his June 2026 zero-click study\"", "original_source": "", "limitation": "Page is Similarweb's own; SparkToro is mentioned as the recipient of Similarweb data, not as co-author.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C008", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Chartbeat", "link_text": "Chartbeat", "source": "searchenginejournal.com", "url": "https://www.searchenginejournal.com/google-search-decline-publishers-chartbeat/590681/", "source_date": "2026-09-24", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "Google Search referrals down 40.2% YoY; search share of pageviews ~9% to 5%", "original_source": "Chartbeat 2026 Publisher Playbook, https://lp.chartbeat.com/2026-publisher-playbook-chartbeat", "limitation": "Periods: July 2025 to July 2026 for the 40.2% decline; July 2024 to July 2026 for the share change.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C009", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Google search traffic to publishers in Chartbeat's network down 40.2%; search share of pageviews fell from about 9% to 5% in two years; small publishers down 60% over two years vs 22% for large. This applies to Chartbeat's publisher network and should not be extrapolated to e-commerce, corporate or small-business sites", "link_text": "small publishers down 60%", "source": "axios.com", "url": "https://www.axios.com/2026/03/17/chartbeat-search-traffic-ai-chatbots", "source_date": "2026-03-17", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed with caveat", "found_text": "Publishers with 1,000-10,000 daily page views \"experiencing the most precipitous traffic declines\"", "original_source": "Chartbeat data provided exclusively to Axios (no URL given)", "limitation": "WebFetch and curl returned 403; browser showed only the intro, 60%/22% figures sit in a chart not in readable text; SEJ corroborates the 60% as from Axios.", "action_in_v1_1": "No change. The figures sit in a chart on a page that blocks automated reading; Search Engine Journal attributes the same figures to it.", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C010", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "**AI assistants send little traffic, but it converts well.** Chartbeat puts AI referrals at 0.01% of publisher traffic despite eightfold growth in two years.", "link_text": "0.01% of publisher traffic", "source": "searchenginejournal.com", "url": "https://www.searchenginejournal.com/google-search-decline-publishers-chartbeat/590681/", "source_date": "2026-09-24", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "AI referrals 0.01% of traffic; \"grew 8x over two years\"", "original_source": "Chartbeat 2026 Publisher Playbook, https://lp.chartbeat.com/2026-publisher-playbook-chartbeat", "limitation": "Playbook also says AI referrals declined across ChatGPT, Claude, Perplexity, Copilot and Gemini in 2026.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C011", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "ChatGPT accounts for about 80% of chatbot referrals in Statcounter's September 2026 worldwide measure, with Gemini, Perplexity, Copilot and Claude sharing the rest.", "link_text": "80% of chatbot referrals", "source": "gs.statcounter.com", "url": "https://gs.statcounter.com/ai-chatbot-market-share", "source_date": "2026-09", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "AI Chatbot Market Share Worldwide, September 2026: ChatGPT 80.47%, Gemini 10.94%, Perplexity 5.84%", "original_source": "", "limitation": "Referral share across sites in Statcounter's tracking network; a monthly series that moves.", "action_in_v1_1": "Replaced an AI-generated secondary page with Statcounter's own series; the figure is now about 80% for September 2026.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C012", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "The quality signals point the other way: Similarweb measured ChatGPT referrals converting at 7% on transactional sites against 5% for Google, and Adobe Analytics found US retail AI-referred traffic in March 2026 converting 42% better than other traffic, a retail-specific, single-month figure on a small and fast-growing base, after converting 38% worse a year earlier; it says nothing about SaaS, services or small-business sites.", "link_text": "7% on transactional sites against 5% for Google", "source": "aisearch.similarweb.com", "url": "https://aisearch.similarweb.com/blog/zero-click-marketing/", "source_date": "2026-06-10", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "ChatGPT-referred visitors \"converted at 7% on transactional sites versus Google's 5%\"", "original_source": "Similarweb 2025 Gen AI Landscape report (US desktop, September 2025)", "limitation": "Figure is US desktop, September 2025 data; scope is transactional sites only.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C013", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "The quality signals point the other way: Similarweb measured ChatGPT referrals converting at 7% on transactional sites against 5% for Google, and Adobe Analytics found US retail AI-referred traffic in March 2026 converting 42% better than other traffic, a retail-specific, single-month figure on a small and fast-growing base, after converting 38% worse a year earlier; it says nothing about SaaS, services or small-business sites.", "link_text": "converting 42% better", "source": "peec.ai", "url": "https://peec.ai/ai-search-geo-statistics", "source_date": "2026-10-30", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "AI-referred retail traffic \"converted 42% better than non-AI traffic\" (Mar 2026); 38% worse Mar 2025", "original_source": "Adobe Analytics, April 2026, via https://finance.yahoo.com/sectors/technology/articles/ai-traffic-us-retailers-jumps-160141756.html", "limitation": "Peec statistics roundup; body says 'Last updated August 2026' while metadata shows Oct 30, 2026; Adobe figure is relayed, not Peec's own data.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C014", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "**What gets cited.** Google's official guidance is that AI features need no new markup or files, only indexed, snippet-eligible pages.", "link_text": "official guidance", "source": "developers.google.com", "url": "https://developers.google.com/search/docs/appearance/ai-features", "source_date": "2025-12-10", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"You don't need to create new machine readable files, AI text files, or markup\"; page must be indexed and snippet-eligible", "original_source": "", "limitation": "Official Google Search documentation; date shown is 'Last updated 2025-12-10'.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C015", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Ahrefs found the share of Overview citations drawn from the top 10 organic results fell from 76% to 38% between July 2025 and March 2026, with about 31% coming from outside the top 100.", "link_text": "fell from 76% to 38%", "source": "ahrefs.com", "url": "https://ahrefs.com/blog/ai-overview-citations-top-10/", "source_date": "2026-03-02", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "\"~76% in July 2025 vs. ~38% today\"; 31.0% of citations beyond the top 100", "original_source": "", "limitation": "Ahrefs sample of 863k keywords; 'today' is March 2026.", "action_in_v1_1": "Linked Ahrefs' original study instead of press coverage; the period is now July 2025 to March 2026.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C016", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Across 30 million citations, Reddit is the first or second most cited domain on all five major assistants; one analysis of 27 million citations reported brand-owned sites earning about 4%, a figure taken from a secondary roundup, not verified against the original dataset, and not relied on in this study's conclusions.", "link_text": "first or second most cited domain", "source": "peec.ai", "url": "https://peec.ai/ai-search-geo-statistics", "source_date": "2026-10-30", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "\"Reddit ranked first or second\" among cited domains on all five major AI platforms", "original_source": "Peec AI, March 2026, https://peec.ai/blog/top-domains-cited-by-ai-search-analysis-based-on-30m-sources", "limitation": "Reddit finding is Peec's own 30M-citation study; the ~4% brand-owned-sites figure is not on this page, as the study already flags.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C017", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "The Princeton generative engine optimisation work showed that adding statistics and quotations raised visibility by up to 40%, and a SIGIR 2026 study tests 18 such factors across six models.", "link_text": "SIGIR 2026 study", "source": "arxiv.org", "url": "https://arxiv.org/pdf/2605.25517", "source_date": "2026-05-25", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "\"one factorial program over 18 content factors\"; \"Across six LLMs we execute 252,000 trials\"; SIGIR '26", "original_source": "", "limitation": "PDF front matter lists Proceedings of SIGIR '26, DOI 10.1145/3805712.3808445; authors report an internal pilot at Sprinklr, so industry-affiliated.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C018", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Cited pages are on average 26% fresher than organic results.", "link_text": "26% fresher", "source": "ahrefs.com", "url": "https://ahrefs.com/blog/do-ai-assistants-prefer-to-cite-fresh-content", "source_date": "2025-07-28", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "cited URLs \"on average, 25.7% 'fresher' than URLs in organic search results\"", "original_source": "", "limitation": "17M citations across 7 platforms; the 44%-from-first-30%-of-page figure is not on this page and needs its own source.", "action_in_v1_1": "Removed the unsourced statement that 44% of ChatGPT citations come from the first 30% of a page.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C019", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Adoption is about 10% of 300k domains with no measurable link to citations; 97% of files received zero AI-crawler requests in a month; Google's John Mueller has said no AI system currently uses it.", "link_text": "10% of 300k domains with no measurable link to citations", "source": "seranking.com", "url": "https://seranking.com/blog/llms-txt/", "source_date": "", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "10.13% of ~300,000 domains had llms.txt; \"no correlation between AI citations and LLMs.txt\"", "original_source": "", "limitation": "SEO-tool vendor's own study; correlational, and the page gives no publication date.", "action_in_v1_1": "Linked SE Ranking's original study instead of press coverage.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C020", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Adoption is about 10% of 300k domains with no measurable link to citations; 97% of files received zero AI-crawler requests in a month; Google's John Mueller has said no AI system currently uses it.", "link_text": "97% of files received zero AI-crawler requests", "source": "projectllmstxt.com", "url": "https://projectllmstxt.com/blog/llms-txt-adoption-2026", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"97% of llms.txt files received zero requests from AI crawlers during the study month\"", "original_source": "Ahrefs server-log study of ~137K sites, 'We Analyzed 137K Sites: 97% of llms.txt Files Never Get Read' (June 2026, no URL given)", "limitation": "Page shows no explicit publication date; study month unnamed; the site advocates llms.txt and relays Ahrefs data, so cite Ahrefs directly.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C021", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Adoption is about 10% of 300k domains with no measurable link to citations; 97% of files received zero AI-crawler requests in a month; Google's John Mueller has said no AI system currently uses it.", "link_text": "no AI system currently uses it", "source": "seroundtable.com", "url": "https://www.seroundtable.com/google-ai-llms-txt-39607.html", "source_date": "2025-06-18", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "Mueller on Bluesky: \"FWIW no AI system currently uses llms.txt.\"", "original_source": "John Mueller Bluesky post, 17 June 2025 (URL not captured)", "limitation": "Statement dates from June 2025; 'currently' refers to that time, not 2026.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C022", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "**How publishers and businesses are responding.** Cloudflare, which fronts over a fifth of web domains, blocks training and agent crawlers by default on ad-bearing pages for new domains since 15 Sep 2026, and is moving Pay Per Crawl toward pay per answer.", "link_text": "blocks training and agent crawlers by default", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/content-independence-day-ai-options/", "source_date": "2026-07-01", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "Training and Agent \"blocked by default on the pages that display ads\" for new domains from Sept 15, 2026; \"more than 20% of web domains\"", "original_source": "", "limitation": "Default applies to new domains onboarding; Search crawlers stay allowed; this page does not mention pay per answer.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C023", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "**How publishers and businesses are responding.** Cloudflare, which fronts over a fifth of web domains, blocks training and agent crawlers by default on ad-bearing pages for new domains since 15 Sep 2026, and is moving Pay Per Crawl toward pay per answer.", "link_text": "pay per answer", "source": "ppc.land", "url": "https://ppc.land/cloudflare-stops-charging-ai-per-crawl-and-starts-paying-per-answer/", "source_date": "2026-07-02", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"The unit of compensation moves from the crawl to the outcome the crawl produces\"", "original_source": "Cloudflare Blog post by Matthew Conroy, 1 July 2026 (URL not linked in article)", "limitation": "Described as a research program with partners Ceramic.ai and You.com, broad availability 'later in 2026'; no pricing disclosed.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C024", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Microsoft opened a Publisher Content Marketplace in February 2026 and Perplexity pays publishers an 80/20 share from Comet Plus.", "link_text": "Publisher Content Marketplace", "source": "searchengineland.com", "url": "https://searchengineland.com/guide/ai-company-publisher-partnerships", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "WebFetch and curl returned HTTP 403; browser hit a Cloudflare bot-verification page that did not clear; not bypassed.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C025", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Microsoft opened a Publisher Content Marketplace in February 2026 and Perplexity pays publishers an 80/20 share from Comet Plus.", "link_text": "80/20 share", "source": "engadget.com", "url": "https://www.engadget.com/ai/perplexity-has-cooked-up-a-new-way-to-pay-publishers-for-their-content-204255019.html", "source_date": "2025-08-25", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "Publishers receive 80 percent of Comet Plus revenue; remaining 20 percent goes to \"compute\"", "original_source": "Perplexity Comet Plus announcement; WSJ report of a $42.5M revenue pool (no URL given)", "limitation": "Comet Plus is $5/month; article is from launch announcement in Aug 2025, not evidence of amounts actually paid.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C026", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Antitrust suits by Penske Media and Chegg over Overviews were dismissed on 30 Sep 2026.", "link_text": "dismissed on 30 Sep 2026", "source": "searchengineland.com", "url": "https://searchengineland.com/penske-media-lawsuit-over-google-ai-overviews-dismissed-493022", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "WebFetch and curl returned HTTP 403; browser hit a Cloudflare bot-verification page that did not clear; dismissal date 30 Sep 2026 not verified.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C027", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "The UK Competition and Markets Authority imposed a publisher conduct requirement on Google on 3 Jun 2026; the CMA's Notice states that it comes into force six months after that date, 3 Dec 2026, except the page-level controls, which come into force at nine months, 3 Mar 2027.", "link_text": "imposed a publisher conduct requirement on Google on 3 Jun 2026", "source": "gov.uk", "url": "https://www.gov.uk/government/news/cma-secures-fairer-deal-for-publishers-and-improves-google-search-services-in-uk", "source_date": "2026-06-03", "source_kind": "regulation", "grade": "E1", "verification": "Confirmed", "found_text": "Press release published 3 June 2026; Google \"will have nine months to implement all changes\"", "original_source": "", "limitation": "Press release confirms date and conduct requirement; it does not mention the six-month commencement or page-level controls, which come from the Notice.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C028", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "The UK Competition and Markets Authority imposed a publisher conduct requirement on Google on 3 Jun 2026; the CMA's Notice states that it comes into force six months after that date, 3 Dec 2026, except the page-level controls, which come into force at nine months, 3 Mar 2027.", "link_text": "CMA's Notice", "source": "assets.publishing.service.gov.uk", "url": "https://assets.publishing.service.gov.uk/media/6a1ec73a59fb7a60f827f64e/Publisher_CR_Notice.pdf", "source_date": "2026-06-03", "source_kind": "regulation", "grade": "E1", "verification": "Confirmed", "found_text": "\"come into force six months after the date of this Notice, with the exception of paragraph 4.b... nine months\"; dated 3 June 2026", "original_source": "", "limitation": "Paragraph 4.b is the page-level withholding control; the Notice gives relative periods, the calendar dates 3 Dec 2026 and 3 Mar 2027 are derived.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C029", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Seven EU and Canadian publisher groups asked EU and Canadian leaders for legislation giving publishers tools to authorise, monitor and enforce the use of their content, in October 2026.", "link_text": "asked EU and Canadian leaders for legislation", "source": "ppc.land", "url": "https://ppc.land/seven-publisher-groups-ask-eu-canada-to-act-on-ai-search-summaries", "source_date": "2026-10-27", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed with caveat", "found_text": "Seven trade groups (five European, two Canadian) sought legislation giving \"meaningful tools to authorize, monitor, and enforce\" content use", "original_source": "Coalition statement distributed via Business Wire, 26 October 2026 (no URL given)", "limitation": "Statement was addressed to EU-Canada Summit leaders asking for a declaration and legislation, not to regulators for CMA-style controls; 'similar controls' is the study's framing.", "action_in_v1_1": "Reworded: the groups asked EU and Canadian leaders for legislation, not regulators for CMA-style controls.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C030", "section": "Shift 1: Discovery moves from search results to answer engines", "claim": "Among small businesses, 33.9% noticed an AI-related traffic drop and 14.8% have seen an assistant state something incorrect about their business, yet only 13% are actively optimising for AI search.", "link_text": "33.9% noticed an AI-related traffic drop", "source": "bccinteractive.com", "url": "https://www.bccinteractive.com/blog/local-ai-search-statistics/", "source_date": "2026-10-25", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"33.9% of small business owners have noticed a drop in website traffic they believe is related to AI\"; 14.8% incorrect info; 13% optimizing", "original_source": "Small Business Expo survey, Sept 2026, 3,608 owners (33.9%, 14.8%); Bluehost State of Small Business AI Confidence 2026, May 2026, 350 owners (13%) (no URLs given)", "limitation": "Agency roundup fetched via browser after 403; the three figures come from two different surveys with very different samples (3,608 vs 350).", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C031", "section": "Shift 2: Agents become visitors", "claim": "OpenAI's Atlas browser stopped working on 9 Aug 2026; OpenAI's help centre now records Atlas as retired and says the older ChatGPT agent is no longer available, pointing users to the cloud browser inside ChatGPT.", "link_text": "stopped working on 9 Aug 2026", "source": "community.openai.com", "url": "https://community.openai.com/t/atlas-is-scheduled-to-stop-working-on-august-9-2026/1389473", "source_date": "2026-08-07", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "Atlas is \"scheduled to stop working on August 9, 2026\"", "original_source": "OpenAI Help Center, \"Evolving Atlas into ChatGPT for browser-based agentic work\", https://help.openai.com/en/articles/20001371", "limitation": "Posted by community member EricGT, not OpenAI staff; page says nothing about the desktop app destination or agent mode withdrawal.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C032", "section": "Shift 2: Agents become visitors", "claim": "OpenAI's Atlas browser stopped working on 9 Aug 2026; OpenAI's help centre now records Atlas as retired and says the older ChatGPT agent is no longer available, pointing users to the cloud browser inside ChatGPT.", "link_text": "records Atlas as retired", "source": "help.openai.com", "url": "https://help.openai.com/en/articles/20001371", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "\"ChatGPT Atlas has been retired and no longer receives updates.\"", "original_source": "", "limitation": "Article now titled \"ChatGPT Atlas retirement\" (updated ~8 days ago); confirms retirement but no longer mentions desktop app, built-in or cloud browser.", "action_in_v1_1": "Reworded to what the revised help article now says and noted that the page was shortened after the study was written.", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C033", "section": "Shift 2: Agents become visitors", "claim": "OpenAI's Atlas browser stopped working on 9 Aug 2026; OpenAI's help centre now records Atlas as retired and says the older ChatGPT agent is no longer available, pointing users to the cloud browser inside ChatGPT.", "link_text": "ChatGPT agent is no longer available", "source": "help.openai.com", "url": "https://help.openai.com/en/articles/11752874-chatgpt-agent", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"ChatGPT agent is no longer available... see Using cloud browser in ChatGPT.\"", "original_source": "", "limitation": "Updated ~3 days ago; no withdrawal date given, and the rest of the article still describes agent mode plans and limits; WebFetch/curl got 403, read via browser.", "action_in_v1_1": "Reworded to what the article now says: ChatGPT agent is no longer available and users are pointed to the cloud browser.", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C034", "section": "Shift 2: Agents become visitors", "claim": "Google's Project Mariner ended on 4 May 2026, its technology folded into other Google products; the consumer browsing agent is Chrome auto browse, a US preview for paid tiers that pauses before purchases and posts and can sign in through Google Password Manager.", "link_text": "ended on 4 May 2026", "source": "gigazine.net", "url": "https://gigazine.net/gsc_news/en/20260507-google-shuts-down-project-mariner/", "source_date": "2026-05-07", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"Project Mariner service ended on May 4, 2026, and its technology has been taken over by other Google products.\"", "original_source": "Google Project Mariner landing page notice, https://labs.google.com/mariner/landing; The Verge, https://www.theverge.com/tech/925559/google-project-mariner-shut-down", "limitation": "Google's notice points users to Gemini Agent, not Chrome auto browse; article does not confirm auto browse as the successor.", "action_in_v1_1": "Reworded: Mariner's technology was folded into other Google products; auto browse is described as the consumer browsing agent, not as Mariner's successor.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C035", "section": "Shift 2: Agents become visitors", "claim": "Google's Project Mariner ended on 4 May 2026, its technology folded into other Google products; the consumer browsing agent is Chrome auto browse, a US preview for paid tiers that pauses before purchases and posts and can sign in through Google Password Manager.", "link_text": "auto browse", "source": "blog.google", "url": "https://blog.google/products-and-platforms/products/chrome/gemini-3-auto-browse/", "source_date": "2026-01-28", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"rolling out in preview in the U.S. for Google AI Pro and Google AI Ultra subscribers\"", "original_source": "", "limitation": "Confirms pause before purchases and social posts and optional Google Password Manager sign-in; no mention of Project Mariner.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C036", "section": "Shift 2: Agents become visitors", "claim": "Microsoft retired Copilot Mode on 13 May 2026 as Browse with Copilot arrived in Edge, US-only for Microsoft 365 Premium subscribers at launch; the business version, agentic browsing with Copilot, is a limited preview scoped by IT to approved sites.", "link_text": "retired Copilot Mode on 13 May 2026", "source": "blogs.windows.com", "url": "https://blogs.windows.com/msedgedev/2026/05/13/new-updates-to-edge-across-desktop-and-mobile/", "source_date": "2026-05-13", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"As part of today's update, we're retiring Copilot Mode.\"", "original_source": "", "limitation": "Browse with Copilot is in a footnote as US-only for Microsoft 365 Premium subscribers; business/IT scoping is not on this page.", "action_in_v1_1": "The retirement is now linked to the page that states it; Browse with Copilot's US and Microsoft 365 Premium scope added.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C037", "section": "Shift 2: Agents become visitors", "claim": "Microsoft retired Copilot Mode on 13 May 2026 as Browse with Copilot arrived in Edge, US-only for Microsoft 365 Premium subscribers at launch; the business version, agentic browsing with Copilot, is a limited preview scoped by IT to approved sites.", "link_text": "scoped by IT to approved sites", "source": "blogs.windows.com", "url": "https://blogs.windows.com/msedgedev/2026/05/20/new-in-edge-for-business-ai-for-work-safe-from-day-one/", "source_date": "2026-05-20", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"complete multi-step tasks on approved sites, with IT controls\"; \"scoped to sites you designate\"", "original_source": "", "limitation": "Page calls it \"agentic browsing with Copilot\" in limited preview, not \"Browse with Copilot\"; says Copilot Mode is \"evolving into granular controls\" rather than retired.", "action_in_v1_1": "Named the business feature as the page does and marked it a limited preview.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C038", "section": "Shift 2: Agents become visitors", "claim": "Anthropic's Claude in Chrome reached general availability on 26 Aug 2026 on paid plans, with a per-action safety classifier; Anthropic's own red-team figures put prompt-injection success at 23.6% in the 2025 pilot and 0 to 0.3% with current safeguards, a vendor evaluation rather than a general security guarantee.", "link_text": "reached general availability on 26 Aug 2026", "source": "claude.com", "url": "https://claude.com/resources/articles/claude-in-chrome-generally-available", "source_date": "2026-08-26", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "\"now generally available on every paid Claude plan\"; \"0.3% attack success rate against Fable 5\"", "original_source": "", "limitation": "GA date, paid plans, per-action classifier and 0-0.3% confirmed; the 23.6% pilot figure is not on this page (it cites 17.6%/16.7% for Opus 4.5).", "action_in_v1_1": "The 23.6% figure now links to Anthropic's 2025 pilot article; this page supports the rest of the sentence.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C039", "section": "Shift 2: Agents become visitors", "claim": "Anthropic's Claude in Chrome reached general availability on 26 Aug 2026 on paid plans, with a per-action safety classifier; Anthropic's own red-team figures put prompt-injection success at 23.6% in the 2025 pilot and 0 to 0.3% with current safeguards, a vendor evaluation rather than a general security guarantee.", "link_text": "23.6% in the 2025 pilot", "source": "claude.com", "url": "https://claude.com/resources/articles/claude-for-chrome", "source_date": "2025-08-26", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"a 23.6% attack success rate\" without mitigations; reduced to 11.2% with them", "original_source": "", "limitation": "Anthropic's own red-team evaluation of 123 test cases in the 2025 pilot.", "action_in_v1_1": "Added as the source of the 23.6% pilot figure, which the general-availability article does not state.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C040", "section": "Shift 2: Agents become visitors", "claim": "Perplexity's Comet has been free worldwide since Oct 2025.", "link_text": "free worldwide since Oct 2025", "source": "ppc.land", "url": "https://ppc.land/perplexity-releases-comet-browser-globally-at-no-cost-after-three-month-limited-rollout/", "source_date": "2025-10-03", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"On October 2, 2025, Perplexity released its Comet browser to the public at no cost\"", "original_source": "Perplexity announcement of 2 Oct 2025 (not linked; only perplexity.ai/comet)", "limitation": "Article does not link the Perplexity announcement it relies on.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C041", "section": "Shift 2: Agents become visitors", "claim": "Trail of Bits showed four classes of injection, including fake CAPTCHAs, that exfiltrated Gmail when a user asked it to summarise an attacker's page, and Brave showed that near-invisible text in screenshots is executed as instructions.", "link_text": "exfiltrated Gmail", "source": "blog.trailofbits.com", "url": "https://blog.trailofbits.com/2026/02/20/using-threat-modeling-and-prompt-injection-to-audit-comet/", "source_date": "2026-02-20", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "\"Each exploit accomplished the same goal: exfiltrating the user's emails from Gmail\"", "original_source": "", "limitation": "Four injection techniques (incl. fake CAPTCHA) combined into five proof-of-concept exploits, triggered when the user asks Comet to summarise an attacker page.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C042", "section": "Shift 2: Agents become visitors", "claim": "Trail of Bits showed four classes of injection, including fake CAPTCHAs, that exfiltrated Gmail when a user asked it to summarise an attacker's page, and Brave showed that near-invisible text in screenshots is executed as instructions.", "link_text": "near-invisible text in screenshots", "source": "brave.com", "url": "https://brave.com/blog/unseeable-prompt-injections/", "source_date": "2025-10-21", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "\"Malicious instructions embedded as nearly-invisible text within the image\" passed to the LLM", "original_source": "", "limitation": "Brave is a competing browser vendor; the screenshot attack applies to Comet only (faint light-blue text on yellow), Fellou's issue is a different navigation-based injection.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C043", "section": "Shift 2: Agents become visitors", "claim": "MCP", "link_text": "MCP", "source": "blog.modelcontextprotocol.io", "url": "https://blog.modelcontextprotocol.io/posts/2026-07-28/", "source_date": "2026-07-28", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "\"The 2026-07-28 Specification\": MCP moves to a stateless request/response core", "original_source": "", "limitation": "Post by MCP lead maintainers (LF Projects); claims ~half a billion SDK downloads a month; deprecates Roots, Sampling, Logging.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C044", "section": "Shift 2: Agents become visitors", "claim": "WebMCP", "link_text": "WebMCP", "source": "developer.chrome.com", "url": "https://developer.chrome.com/blog/ai-webmcp-origin-trial", "source_date": "2026-06-09", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"In Chrome 149, you can sign up for the WebMCP origin trial.\"", "original_source": "", "limitation": "Page does not mention Edge, document.modelContext, Firefox or Safari.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C045", "section": "Shift 2: Agents become visitors", "claim": "Chrome 149 and Edge 150 origin trials; Firefox and Safari have standards-position requests open and no stated position", "link_text": "Firefox and Safari have standards-position requests open and no stated position", "source": "github.com", "url": "https://github.com/webmachinelearning/webmcp/blob/main/implementation-status.md", "source_date": "", "source_kind": "standard", "grade": "E1", "verification": "Confirmed with caveat", "found_text": "\"An Origin Trial is live in Chrome 149\"; \"An Origin Trial is live in Edge 150\"", "original_source": "", "limitation": "Chrome 149 and Edge 150 confirmed; for Firefox and Safari the page only links Mozilla/WebKit standards-position issues with no stated position, so \"undecided\" is an inference.", "action_in_v1_1": "Reworded: Firefox and Safari have standards-position requests open and no stated position.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C046", "section": "Shift 2: Agents become visitors", "claim": "Register typed tools in the page through an imperative API, or annotate forms declaratively; human-in-the-loop only, not headless", "link_text": "an imperative API, or annotate forms declaratively", "source": "developer.chrome.com", "url": "https://developer.chrome.com/docs/ai/webmcp", "source_date": "2026-05-18", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "\"primarily designed for local browser workflows with a human in the loop\"", "original_source": "", "limitation": "Human-in-the-loop and declarative form annotation confirmed; the identifier document.modelContext is not on this page (it sits on the linked Imperative API page); last updated 2026-10-07.", "action_in_v1_1": "Dropped the identifier document.modelContext, which sits on a sub-page; the cell now describes the imperative and declarative APIs.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C047", "section": "Shift 2: Agents become visitors", "claim": "NLWeb", "link_text": "NLWeb", "source": "presenc.ai", "url": "https://presenc.ai/research/nlweb-adoption-2026", "source_date": "2026-09", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"No public count of NLWeb deployments exists.\"", "original_source": "Microsoft NLWeb announcement, https://news.microsoft.com/source/features/company-news/introducing-nlweb-bringing-conversational-interfaces-directly-to-the-web/; NLWeb GitHub, https://github.com/nlweb-ai/NLWeb", "limitation": "Vendor (GEO firm) blog; only \"last updated September 2026\" shown; lists launch partners, ~6.3K GitHub stars; warns any site-count figure is an estimate.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C048", "section": "Shift 2: Agents become visitors", "claim": "Web Bot Auth", "link_text": "Web Bot Auth", "source": "datatracker.ietf.org", "url": "https://datatracker.ietf.org/doc/draft-ietf-webbotauth-httpsig-protocol/", "source_date": "2026-10-29", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "draft-ietf-webbotauth-httpsig-protocol-01, 29 October 2026, \"Intended status: Standards Track\", Active Internet-Draft", "original_source": "", "limitation": "Datatracker sidebar shows \"Intended RFC status: (None)\" while the draft header says Standards Track; authors Meunier (Cloudflare) and Major (Google).", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C049", "section": "Shift 2: Agents become visitors", "claim": "IETF Internet-Draft 01 dated 29 Oct 2026, standards-track but not yet an RFC; OpenAI, Google and AWS sign agent requests", "link_text": "OpenAI, Google and AWS sign agent requests", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/agentic-web", "source_date": "2026-09-30", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "operators \"including OpenAI, Google, and AWS, cryptographically sign their agents' requests\"", "original_source": "", "limitation": "Cloudflare's own statement about Web Bot Auth adopters on its network; \"including\" implies the list is not exhaustive.", "action_in_v1_1": "The Pay Per Use cell now cites Cloudflare's 30 September 2026 post, which describes the closed beta; Pay Per Crawl was removed from the cell because the cited post did not mention it.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C050", "section": "Shift 2: Agents become visitors", "claim": "Agentic Commerce Protocol", "link_text": "Agentic Commerce Protocol", "source": "agenticcommerce.dev", "url": "https://www.agenticcommerce.dev/docs/changelog", "source_date": "2026-01-30", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "\"API Version: 2026-01-30\"; previous versions 2025-12-12 and 2025-09-29", "original_source": "", "limitation": "Changelog does not name the maintainers; links github.com/agentic-commerce-protocol.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C051", "section": "Shift 2: Agents become visitors", "claim": "Spec of 30 Jan 2026; in-chat Instant Checkout deprioritised in Mar 2026 for discovery in chat, purchase on site", "link_text": "deprioritised in Mar 2026", "source": "openai.com", "url": "https://openai.com/index/powering-product-discovery-in-chatgpt/", "source_date": "2026-03-24", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"initial version of Instant Checkout did not offer the level of flexibility... allowing merchants to use their own checkout experiences while we focus our efforts on product discovery\"", "original_source": "", "limitation": "\"Deprioritised\" is a paraphrase; OpenAI frames it as letting merchants use their own checkout; WebFetch got 403, read via browser.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C052", "section": "Shift 2: Agents become visitors", "claim": "A product feed; optionally five checkout REST endpoints", "link_text": "five checkout REST endpoints", "source": "agenticcommerce.dev", "url": "https://www.agenticcommerce.dev/docs/getting-started/sellers", "source_date": "", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "Five endpoints: POST /checkout_sessions, GET /{id}, POST /{id}, /{id}/complete, /{id}/cancel", "original_source": "", "limitation": "Page confirms five checkout REST endpoints but does not mention the product feed or say checkout is optional.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C053", "section": "Shift 2: Agents become visitors", "claim": "Universal Commerce Protocol", "link_text": "Universal Commerce Protocol", "source": "developers.googleblog.com", "url": "https://developers.googleblog.com/under-the-hood-universal-commerce-protocol-ucp/", "source_date": "2026-01-11", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"Under the Hood: Universal Commerce Protocol (UCP)\", Jan. 11, 2026, developed with Shopify, Etsy, Wayfair, Target, Walmart", "original_source": "", "limitation": "Requires an active Merchant Center account and interest form; no waitlist or US-only wording on this page.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C054", "section": "Shift 2: Agents become visitors", "claim": "Announced Jan 2026; merchants join a waitlist", "link_text": "merchants join a waitlist", "source": "developers.google.com", "url": "https://developers.google.com/merchant/ucp", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "\"Join the waitlist\" via Merchant Center contact form; embedded checkout \"for specific, approved merchants\"", "original_source": "", "limitation": "Waitlist confirmed; the page states no US-only or regional restriction; no publication date (URL path contains 2026-04-08).", "action_in_v1_1": "Removed 'US'; the page states a waitlist with no regional restriction.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C055", "section": "Shift 2: Agents become visitors", "claim": "Agent Payments Protocol", "link_text": "Agent Payments Protocol", "source": "blog.google", "url": "https://blog.google/products-and-platforms/platforms/google-pay/agent-payments-protocol-fido-alliance/", "source_date": "2026-04-28", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "Google donating Agent Payments Protocol (AP2) to the FIDO Alliance; AP2 v0.2 adds \"Human Not Present\" payments", "original_source": "", "limitation": "Also announces Verifiable Intent standard co-developed with Mastercard; no adoption counts.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C056", "section": "Shift 2: Agents become visitors", "claim": "Markdown for Agents", "link_text": "Markdown for Agents", "source": "developers.cloudflare.com", "url": "https://developers.cloudflare.com/fundamentals/reference/markdown-for-agents/", "source_date": "2026-10-09", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"the client needs to add the Accept negotiation header with text/markdown\"; Pro, Business, Enterprise at no cost", "original_source": "", "limitation": "Feature is enabled per zone (not stated as default on); date shown is last-updated.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C057", "section": "Shift 2: Agents become visitors", "claim": "Search / Training / Agent controls", "link_text": "Search / Training / Agent controls", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/accountable-mixed-use-ai-crawlers", "source_date": "2026-09-15", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "Search, Training, Agent controls; \"Beginning September 15, customers onboarding a new domain will be offered one of two preset configurations\"", "original_source": "", "limitation": "Presets apply to newly onboarded domains; existing settings carry over; Disallow directive exists only for Training; Pay Per Crawl/Use not mentioned here.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C058", "section": "Shift 2: Agents become visitors", "claim": "Default since 15 Sep 2026; Pay Per Use in closed beta for US customers", "link_text": "Pay Per Use", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/agentic-web", "source_date": "2026-09-30", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "operators \"including OpenAI, Google, and AWS, cryptographically sign their agents' requests\"", "original_source": "", "limitation": "Cloudflare's own statement about Web Bot Auth adopters on its network; \"including\" implies the list is not exhaustive.", "action_in_v1_1": "The Pay Per Use cell now cites Cloudflare's 30 September 2026 post, which describes the closed beta; Pay Per Crawl was removed from the cell because the cited post did not mention it.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C059", "section": "Shift 2: Agents become visitors", "claim": "**Agentic commerce is protocols ahead of adoption.** Every network has a protocol: Visa's Intelligent Commerce Connect accepts four of them in one integration, and Mastercard's Agent Pay Trust Framework adds know-your-agent verification.", "link_text": "Intelligent Commerce Connect", "source": "usa.visa.com", "url": "https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22276.html", "source_date": "2026-04-08", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"One integration\" accepting Trusted Agent Protocol, MPP, ACP and UCP", "original_source": "", "limitation": "Intelligent Commerce Connect described as in pilot with select partners.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C060", "section": "Shift 2: Agents become visitors", "claim": "**Agentic commerce is protocols ahead of adoption.** Every network has a protocol: Visa's Intelligent Commerce Connect accepts four of them in one integration, and Mastercard's Agent Pay Trust Framework adds know-your-agent verification.", "link_text": "Agent Pay Trust Framework", "source": "investor.mastercard.com", "url": "https://investor.mastercard.com/investor-news/investor-news-details/2026/Mastercard-Advances-Agentic-Commerce-With-New-Trust-and-Intelligence-Services/default.aspx", "source_date": "2026-09-30", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "Framework \"brings together identity, intent, controls, execution and intelligence\"; Skyfire provides \"Know Your Agent (KYA) technology\"", "original_source": "", "limitation": "KYA verification comes via a Skyfire partnership extending into Mastercard Agent Pay rather than as a native framework component.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "429" }, { "id": "C061", "section": "Shift 2: Agents become visitors", "claim": "The only merchant count found is Forrester's estimate, via secondary reporting, of about 30 live Shopify stores on Instant Checkout by February 2026, after which OpenAI itself retreated to discovery in chat and checkout on the merchant's site.", "link_text": "about 30 live Shopify stores", "source": "digitalsilk.com", "url": "https://www.digitalsilk.com/digital-trends/digital-trends-chatgpt-ecommerce/", "source_date": "2026-09-16", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "by February 2026 \"Forrester found only about 30 Shopify merchants were actually live on the feature\"", "original_source": "Forrester (no URL given)", "limitation": "Agency blog; Forrester figure is unlinked and unsourced on the page; also states checkout now happens on the retailer's own site.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C062", "section": "Shift 2: Agents become visitors", "claim": "**The economics of being crawled.** Cloudflare reports that daily AI-agent requests grew over 1,700% year on year, that training crawlers' share of crawler requests rose from 22% in spring 2025 to 52% in June 2026, and that human traffic to heavily crawled categories fell by up to 40%.", "link_text": "daily AI-agent requests grew over 1,700% year on year", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/agentic-web", "source_date": "2026-09-30", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "\"daily requests from AI agents on our network grew by more than 1,700%\"; training share 22% to 52%; human traffic down \"as much as 40%\"", "original_source": "", "limitation": "Growth is \"over the past year\" on Cloudflare's network; training shares rely on crawlers' stated purpose; 40% is a ceiling for a few categories (Retail, Software, IT, Financial).", "action_in_v1_1": "The Pay Per Use cell now cites Cloudflare's 30 September 2026 post, which describes the closed beta; Pay Per Crawl was removed from the cell because the cited post did not mention it.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C063", "section": "Shift 2: Agents become visitors", "claim": "Thales and Imperva put bots at 53% of web traffic in 2025, with legitimate AI bots about 2% of sessions, split 85% crawlers to 15% user-directed fetches; the 53% is in the public press release, the breakdown is from the gated report and was not re-verified.", "link_text": "bots at 53% of web traffic in 2025", "source": "imperva.com", "url": "https://www.imperva.com/company/press_releases/ai-driven-bot-attacks-surged-12-5x-according-to-thales-bad-bot-report/", "source_date": "2026-04-29", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed with caveat", "found_text": "\"In 2025, bots made up more than 53% of all web traffic, up from 51%\"", "original_source": "Thales 2026 Bad Bot Report (Imperva)", "limitation": "53% confirmed; the ~2% legitimate AI bot share and 85/15 crawler-to-fetch split are not in the press release (may be in the full report).", "action_in_v1_1": "Marked the 2% and 85/15 breakdown as figures from the gated report that were not re-verified; the 53% is in the press release.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C064", "section": "Shift 2: Agents become visitors", "claim": "Crawl-to-referral ratios differ by orders of magnitude between operators: Google near 5 to 1, OpenAI about 250 to 1, Anthropic about 1,900 to 1 in July 2026, by Cloudflare Radar's method, which excludes referrals from native apps and so overstates all three.", "link_text": "Google near 5 to 1, OpenAI about 250 to 1, Anthropic about 1,900 to 1", "source": "ecorpit.com", "url": "https://ecorpit.com/ai-crawler-crawl-to-referral-ratio-2026-geo-decision/", "source_date": "2026-08-06", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "July 2026: Google 4.7:1, OpenAI 251:1, Anthropic 1,917:1", "original_source": "Cloudflare Radar crawl_refer_ratio endpoint via TechnologyChecker \"ChatGPT Statistics 2026\"; methodology at https://blog.cloudflare.com/ai-search-crawl-refer-ratio-on-radar/", "limitation": "Third-hand relay of Radar data (pulled 1 Aug 2026); native-app caveat quoted from Cloudflare refers specifically to Claude's app, generalised by the author.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C065", "section": "Shift 2: Agents become visitors", "claim": "**How agents actually read a site.** Browser agents commonly work from semantic page structure and accessibility information, for example the accessibility tree with element references that Browserbase's agent browser exposes to the model, while some also act from screenshots.", "link_text": "accessibility tree with element references", "source": "docs.browserbase.com", "url": "https://docs.browserbase.com/integrations/agent-browser/introduction", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "\"Accessibility tree snapshots with element refs (@e1, @e2) optimized for LLM consumption\"", "original_source": "", "limitation": "Supports accessibility-tree reading for one vendor's tool only; page does not describe screenshot-based visual interaction as a reading mode, so \"many browser agents\" is a generalisation.", "action_in_v1_1": "Reworded to one vendor's documented behaviour rather than a claim about many browser agents.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C066", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Gemini dynamic view / visual layout", "link_text": "Gemini dynamic view / visual layout", "source": "research.google", "url": "https://research.google/blog/generative-ui-a-rich-custom-visual-interactive-user-experience-for-any-prompt/", "source_date": "2025-11-18", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "Gemini app generative UI rolling out as two experiments: \"dynamic view and visual layout\"", "original_source": "", "limitation": "Google Research blog; also says AI Mode generative UI is for Google AI Pro and Ultra subscribers in the US.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C067", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Experiment, US, paid tiers, 18+, not in mobile app; \"a minute or more\" per page", "link_text": "not in mobile app", "source": "support.google.com", "url": "https://support.google.com/gemini/answer/16741341", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Not re-checked (page unreadable on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "Answer ID 16741341 redirects to the generic 'Use Gemini Apps' article (answer 13275745), which mentions none of the Dynamic view details (experiment, US, paid tiers, mobile app, minute).", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C068", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "A2UI v0.9", "link_text": "A2UI v0.9", "source": "developers.googleblog.com", "url": "https://developers.googleblog.com/a2ui-v0-9-generative-ui/", "source_date": "2026-04-17", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"A2UI v0.9: The New Standard for Portable, Framework-Agnostic Generative UI\"", "original_source": "", "limitation": "Describes bring-your-own component catalog; built-in component set renamed 'Basic'.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C069", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "json-render", "link_text": "json-render", "source": "infoq.com", "url": "https://www.infoq.com/news/2026/03/vercel-json-render/", "source_date": "2026-03-26", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "json-render: catalog of permitted components via Zod schemas; Apache 2.0; 13,000+ stars", "original_source": "Vercel json-render GitHub repository / Vercel announcement (not linked precisely on the page)", "limitation": "InfoQ reports Vercel's own figures; '13,000 stars since January 2026 launch' is as of article date.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C070", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Open source, 13k+ stars by Mar 2026; the older AI SDK RSC streamUI path is marked experimental", "link_text": "AI SDK RSC streamUI path", "source": "ai-sdk.dev", "url": "https://ai-sdk.dev/docs/ai-sdk-rsc/overview", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"AI SDK RSC is currently experimental. We recommend using AI SDK UI for production.\"", "original_source": "", "limitation": "", "action_in_v1_1": "Linked the AI SDK RSC page that states the experimental status; the version number was dropped.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C071", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Apps in ChatGPT", "link_text": "Apps in ChatGPT", "source": "openai.com", "url": "https://openai.com/index/introducing-apps-in-chatgpt/", "source_date": "2025-10-06", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"Introducing apps in ChatGPT and the new Apps SDK\", built on MCP, preview", "original_source": "", "limitation": "WebFetch and curl returned 403/JS wall; read via browser pane. Page says submissions and directory would open 'later this year'.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C072", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Directory open to submissions; production checkout enabled by OpenAI after sandbox testing and compliance attestation", "link_text": "Directory open to submissions", "source": "openai.com", "url": "https://openai.com/index/developers-can-now-submit-apps-to-chatgpt/", "source_date": "2025-12-17", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"Starting today, developers can submit apps for review and publication in ChatGPT\"; app directory", "original_source": "", "limitation": "Read via browser pane (403 to fetchers). Page says in this early phase developers link out to their own sites to complete physical-goods transactions; it does not itself say checkout is for approved partners only.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C073", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Directory open to submissions; production checkout enabled by OpenAI after sandbox testing and compliance attestation", "link_text": "enabled by OpenAI after sandbox testing and compliance attestation", "source": "developers.openai.com", "url": "https://developers.openai.com/commerce/guides/production", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "\"OpenAI may require your attestation of compliance (AOC) before enabling production access\"", "original_source": "", "limitation": "Page shows production checkout access is gated by OpenAI (sandbox tests, possible AOC, OpenAI enables access) but never uses the phrase 'approved partners only'.", "action_in_v1_1": "Reworded to the gating the page describes: sandbox testing and compliance attestation before production access.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C074", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "MCP Apps", "link_text": "MCP Apps", "source": "blog.modelcontextprotocol.io", "url": "https://blog.modelcontextprotocol.io/posts/2026-01-26-mcp-apps/", "source_date": "2026-01-26", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "\"MCP Apps are now live as an official MCP extension.\"", "original_source": "", "limitation": "Lists Claude (web, desktop), ChatGPT (rolling out), Goose, VS Code Insiders as supporting hosts.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C075", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Live in Claude on all plans; supported by ChatGPT, Goose, VS Code Insiders", "link_text": "Live in Claude", "source": "claude.com", "url": "https://claude.com/blog/interactive-tools-in-claude", "source_date": "2026-01-26", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"Available in Claude on mobile, web and desktop for Free, Pro, Max, Ultra, Team, and Enterprise plans.\"", "original_source": "", "limitation": "Page lists every plan rather than saying 'all plans'; the ChatGPT/Goose/VS Code Insiders support comes from the MCP blog (C073), not this page.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C076", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Thesys C1, now OpenUI", "link_text": "Thesys C1, now OpenUI", "source": "openui.com", "url": "https://www.openui.com/docs", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"OpenUI is the open standard for Generative UI\"; components defined by the developer", "original_source": "", "limitation": "The Thesys C1 documentation now redirects here; the product was renamed.", "action_in_v1_1": "Name and link updated; the Thesys C1 docs now redirect to OpenUI.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C077", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "The closest, Agent Image's SiteAI for real-estate sites (Oct 2026), layers answers over a conventional crawlable site.", "link_text": "Agent Image's SiteAI", "source": "inman.com", "url": "https://www.inman.com/2026/10/26/agent-image-siteai-agent-websites/", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "WebFetch 403; curl and browser pane both stopped at a Cloudflare 'Just a moment' bot-verification page after repeated waits.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C078", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Shopify Sidekick, a merchant-facing assistant, handled about 34 million conversations in fiscal Q2 2026 (Apr to Jun 2026), with daily sessions up 4.8x year on year, per the earnings call.", "link_text": "earnings call", "source": "fool.com", "url": "https://www.fool.com/earnings/call-transcripts/2026/08/12/shopify-shop-q2-2026-earnings-call-transcript/", "source_date": "2026-08-12", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"It handled nearly 34 million conversations\"; \"daily sessions were up 4.8x\"", "original_source": "Shopify Q2 2026 earnings call, 2026-08-05 (transcript hosted by The Motley Fool)", "limitation": "Transcript gives call date as August 5, 2026 while the page is dated August 12; figures are Shopify management statements (Harley Finkelstein).", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C079", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Intercom claims a 76% average resolution rate for its Fin agent, under a billing definition that counts a conversation as resolved when the customer confirms the answer or leaves without asking for more; no independent measurement of Fin's resolution rate was found.", "link_text": "76% average resolution rate", "source": "intercom.com", "url": "https://www.intercom.com/blog/from-resolutions-to-outcomes-evolving-how-fin-delivers-value/", "source_date": "2026-03-12", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "average resolution rate \"now stands at 76%\" across customers", "original_source": "", "limitation": "Chart caption refers to data 'as of June 2026', later than the March byline, suggesting the page was updated.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C080", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Intercom claims a 76% average resolution rate for its Fin agent, under a billing definition that counts a conversation as resolved when the customer confirms the answer or leaves without asking for more; no independent measurement of Fin's resolution rate was found.", "link_text": "billing definition", "source": "simpli.support", "url": "https://simpli.support/insights/intercom-fin-and-the-resolution-number", "source_date": "2026-10-02", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed with caveat", "found_text": "\"A resolution bills when the customer either confirms the answer helped OR simply exits without asking for more.\"", "original_source": "Intercom blog and help-center pages on Fin 2, Fin 3 and Fin outcomes; Mostly Metrics newsletter", "limitation": "Supports the 'abandoned chats counted as resolved' caveat, but the page contains no independent tests and no 38% or 53% figures; all rates quoted are Intercom's own (25%, 51%, 66%, 76%).", "action_in_v1_1": "Removed the unsupported '38 to 53%' from independent tests; kept the billing-definition caveat the page supports; stated that no independent measurement was found.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C081", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "A cross-vendor benchmark puts median AI self-service deflection near 22%.", "link_text": "22%", "source": "happysupport.ai", "url": "https://www.happysupport.ai/en/blog/support-ticket-deflection-rate-benchmarks", "source_date": "2026-06-06", "source_kind": "estimate", "grade": "E4", "verification": "Confirmed", "found_text": "\"AI Self-Service deflection median across honest sources is 22 percent, range 8 to 45 percent.\"", "original_source": "Cross-source synthesis by HappySupport citing Zendesk, Intercom, Forrester, Aberdeen, Gartner, HubSpot, Salesforce (no per-source figures shown)", "limitation": "Published by a support-AI vendor; the 22% is the vendor's own synthesis with no methodology or per-source numbers; page updated 2026-10-26.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C082", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Nielsen Norman Group found that none of its participants discovered Amazon's Rufus chat unprompted, and that most AI features tested lacked discoverability.", "link_text": "most AI features tested lacked discoverability", "source": "nngroup.com", "url": "https://www.nngroup.com/articles/discoverability-ai-amazon/", "source_date": "2025-03-21", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "\"none of our participants noticed it until a researcher pointed it out\"; majority of AI features lacked discoverability", "original_source": "", "limitation": "Qualitative usability study; participant count not stated in the fetched summary.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C083", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Some participants in NN/g's Google AI Mode study did not realise follow-up questions were possible.", "link_text": "Google AI Mode study", "source": "nngroup.com", "url": "https://www.nngroup.com/articles/google-ai-mode/", "source_date": "2025-10-17", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed with caveat", "found_text": "\"at times, participants did not realize they could ask followup questions in the chat\"", "original_source": "", "limitation": "Source says 'at times' some participants did not realize, not that users in general did not; the claim slightly overgeneralises.", "action_in_v1_1": "Reworded to 'some participants', as the study reports.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C084", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "NN/g's articulation barrier argument, made first for image generators, is that many users cannot phrase what they want, and it proposes hybrid GUI plus prompt as the remedy.", "link_text": "articulation barrier", "source": "nngroup.com", "url": "https://www.nngroup.com/articles/ai-articulation-barrier/", "source_date": "2023-08-13", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed with caveat", "found_text": "users \"lack the vocabulary to write the required prompt\"; solution combines prompt with GUI elements", "original_source": "", "limitation": "Article is specifically about image generators (Midjourney) and presents the hybrid GUI-plus-prompt approach as a proposal needing further evaluation, not a finding that it 'beats chat alone'.", "action_in_v1_1": "Reworded: the article concerns image generators and proposes the hybrid approach rather than demonstrating it beats chat.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C085", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Baymard's October 2026 study of 2,273 US shoppers found a clear split by task: 63% prefer AI chat for feature comparison and 59% for stock checks, but 66 to 69% want a human for damaged, late or billing problems, and 60% say a product image they know is AI-generated lowers purchase confidence.", "link_text": "63% prefer AI chat for feature comparison", "source": "baymard.com", "url": "https://baymard.com/research-articles/ai-engagement-quantitative-ux-insights-2026", "source_date": "2026-10-27", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "2,273 US shoppers; 63% compare features, 59% stock; 69/67/66% human; 60% AI image reduces confidence", "original_source": "", "limitation": "Survey data collected June 2026, published October 2026; Baymard is a commercial UX research firm (survey-based, not behavioural).", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C086", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "NN/g's October 2026 survey of 521 practitioners scored AI time savings at 4.2 of 5 but sentiment at 3.57, with 69% of comments negative, mostly about unreliable output.", "link_text": "October 2026 survey", "source": "nngroup.com", "url": "https://www.nngroup.com/articles/ai-in-ux-survey-26/", "source_date": "2026-10-23", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "521 responses; time savings 4.2/5; sentiment 3.57/5; 69% of comments at least partly negative", "original_source": "", "limitation": "Survey fielded Aug 24 to Sep 11, 2026; 69% figure is from 226 optional comments (43% of sample) and the authors note likely negativity skew.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C087", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "Claimed personalisation lifts of 10 to 30% trace back to vendor and consultancy reports; no 2026 peer-reviewed trial of adaptive landing pages was found.", "link_text": "vendor and consultancy reports", "source": "shno.co", "url": "https://www.shno.co/marketing-statistics/ai-personalization-statistics", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "McKinsey via Shopify: 5-15% revenue lift, 10-30% marketing efficiency; Salesforce: 25% higher conversion", "original_source": "McKinsey, BCG, Salesforce, Forrester TEI (Salesforce-commissioned), Shopify, Envive and other vendor/consultancy reports", "limitation": "Aggregator page with no date and secondhand citations; it cites no peer-reviewed trial, which supports the claim's framing that lifts trace to vendor and consultancy reports.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C088", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "**Cost and latency are design constraints, not afterthoughts.** A modelled retail generative-UI session of three turns and three tool calls costs about $0.08 per session, with tool calls near 40% of the bill; prompt caching of a 2.5k-token prefix cuts it by roughly 38% but has to be switched on deliberately.", "link_text": "$0.08 per session", "source": "verygood.ventures", "url": "https://verygood.ventures/blog/gap-3-run-rate-economics/", "source_date": "2026-07-29", "source_kind": "estimate", "grade": "E4", "verification": "Confirmed", "found_text": "about $0.083 per session; tool calls ~40%; caching 2,500-token prefix saves ~38%; caching must be enabled", "original_source": "", "limitation": "Explicitly a modelled estimate (retail running-shoe scenario, Claude Sonnet 5 pricing July 2026), not a measured bill; date from structured data only.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C089", "section": "Shift 3: Interfaces become generative, but inside a fixed catalog", "claim": "An April 2026 paper on generative UI accessibility recommends specifying layout policies rather than layouts, because full-page regeneration is too slow without caching or smaller models.", "link_text": "generative UI accessibility", "source": "arxiv.org", "url": "https://arxiv.org/abs/2604.25455", "source_date": "2026-04-28", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "\"shifts the designer's role from specifying layouts to specifying policies\"; regeneration took 1-5 minutes; needs caching or smaller models", "original_source": "", "limitation": "Preprint (Ryskeldiev, cs.HC); latency sentence is in Section 6.2 of the full text, citing an ASSETS '25 study, not in the abstract.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C090", "section": "Shift 4: Building a website becomes a prompt", "claim": "Lovable", "link_text": "Lovable", "source": "techcrunch.com", "url": "https://techcrunch.com/2026/09/24/lovables-annualized-revenue-crosses-600m-as-vibe-coding-takes-off/", "source_date": "2026-09-24", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"Lovable has crossed annual run-rate revenue of $600 million\"", "original_source": "Remarks by Lovable co-founder Fabian Hedin at HumanX Amsterdam (no URL given)", "limitation": "Figure is a founder statement reported by TechCrunch, not audited; page also gives $13.3B valuation after a $400M August round.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C091", "section": "Shift 4: Building a website becomes a prompt", "claim": "Over $600M annualised revenue; 1M new projects a week at $500M in June", "link_text": "$500M in June", "source": "techcrunch.com", "url": "https://techcrunch.com/2026/06/09/lovable-says-it-has-hit-500m-in-annualized-revenue-with-1-million-new-projects-a-week/", "source_date": "2026-06-09", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"surpassed $500 million in annualized revenue run rate\"; \"one million new projects a week\"", "original_source": "Lovable statement to TechCrunch; Lovable blog (lovable.dev/blog)", "limitation": "Both figures are company self-reported claims relayed by TechCrunch.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C092", "section": "Shift 4: Building a website becomes a prompt", "claim": "Replit", "link_text": "Replit", "source": "sacra.com", "url": "https://sacra.com/c/replit/", "source_date": "", "source_kind": "estimate", "grade": "E4", "verification": "Confirmed", "found_text": "\"Sacra estimates that Replit hit $525M in annualized revenue in April 2026\"", "original_source": "", "limitation": "Page also states $400M Series D at $9B (March 2026) and Agent 4 web launch March 2026; its growth-rate and funding-total figures are internally inconsistent.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C093", "section": "Shift 4: Building a website becomes a prompt", "claim": "About $525M annualised (Sacra estimate); Agent 4 launched with a $400M round at $9B", "link_text": "$9B", "source": "aimagazine.com", "url": "https://aimagazine.com/news/replit-ai-agents-vibe-coding-and-a-us-9bn-valuation", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "HTTP 403 Cloudflare challenge via WebFetch and curl; the $400M-at-$9B and Agent 4 facts are independently stated on the Sacra Replit page (C091).", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C094", "section": "Shift 4: Building a website becomes a prompt", "claim": "Vercel v0", "link_text": "Vercel v0", "source": "sacra.com", "url": "https://sacra.com/c/vercel/", "source_date": "", "source_kind": "estimate", "grade": "E4", "verification": "Confirmed", "found_text": "\"more than 4M people have used v0 since its launch\"; Vercel $600M est. Sept 2026", "original_source": "", "limitation": "Name-anchor link; page gives v0 user counts and Vercel-level revenue estimate but no v0-specific revenue figure.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C095", "section": "Shift 4: Building a website becomes a prompt", "claim": "Wix", "link_text": "Wix", "source": "sec.gov", "url": "https://www.sec.gov/Archives/edgar/data/1576789/000162828026052108/secondquarter2026results.htm", "source_date": "2026-08-04", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "Wix Q2 2026 press release: revenue $563.1M, \"2025 acquisition of Base44\"", "original_source": "", "limitation": "Name-anchor link; filing confirms Base44 acquisition but gives no Base44 ARR, price, or acquisition date.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C096", "section": "Shift 4: Building a website becomes a prompt", "claim": "Base44, bought for $80M in Jun 2025, reported at $150M ARR by May 2026", "link_text": "reported at $150M ARR", "source": "getlatka.com", "url": "https://getlatka.com/blog/base44-revenue-acquired-wix", "source_date": "2026-08-31", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"Wix acquired Base44 for $80 million in cash on June 18, 2025\"; \"$150 million ARR by May 2026\"", "original_source": "Calcalist report dated 2026-05-25 (no URL given); Wix announcement of 2025-06-18", "limitation": "$80M is cash at close; page says earn-outs have since pushed total consideration past $150M. Published 2025-06-18, modified 2026-08-31.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C097", "section": "Shift 4: Building a website becomes a prompt", "claim": "Bolt.new", "link_text": "Bolt.new", "source": "altar.io", "url": "https://altar.io/lovable-vs-bolt-vs-v0-vs-replit-vs-base44/", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"Bolt.new went from zero to over $40M ARR in roughly five months\"", "original_source": "", "limitation": "Name-anchor link; agency comparison blog with undated page and no sources cited for its revenue figures.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C098", "section": "Shift 4: Building a website becomes a prompt", "claim": "AI site building inside both Shopify (Sidekick) and Squarespace (Blueprint); Squarespace added an AI Visibility tool in Jul 2026", "link_text": "Squarespace added an AI Visibility tool", "source": "squarespace.com", "url": "https://www.squarespace.com/blog/product-updates-july-2026", "source_date": "2026-07-28", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"See how your business shows up in ChatGPT and Gemini with AI Visibility\"", "original_source": "", "limitation": "", "action_in_v1_1": "Replaced a secondary page that did not state the claim with Squarespace's July 2026 product update, which announces AI Visibility; the unsourced 'every plan' wording was removed.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C099", "section": "Shift 4: Building a website becomes a prompt", "claim": "**Quality and security are where the cracks show.** A researcher's 2025 assessment of 1,645 publicly discoverable Lovable applications identified 170 (10.3%) with database access-control misconfigurations involving Supabase row-level security, catalogued as CVE-2025-48757.", "link_text": "170 (10.3%) with database access-control misconfigurations", "source": "bleek.dev", "url": "https://www.bleek.dev/cve-2025-48757", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"170 apps found exposed out of 1,645 scanned\"; \"10.3% of analysed Lovable projects affected\"", "original_source": "Researcher Matt Palmer's May 2025 crawl of 1,645 Lovable projects (no URL given)", "limitation": "Page is a write-up of Palmer's disclosure, dated only 'May 2025'; it does not discuss Lovable's own scanner.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C100", "section": "Shift 4: Building a website becomes a prompt", "claim": "2026 guides from security reviewers still list missing row-level security as the most common critical issue in Lovable apps.", "link_text": "2026 guides from security reviewers", "source": "launchreadycode.com", "url": "https://launchreadycode.com/guides/is-lovable-safe", "source_date": "2026-08-16", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "RLS \"remains the single most common critical issue we see in Lovable apps\"", "original_source": "", "limitation": "Guide (by a security-review vendor) does call RLS the top critical issue, but says nothing about Lovable's scanner checking only that policies exist; its own stats list missing headers (83%) above absent RLS (58%).", "action_in_v1_1": "Removed the unsupported statement about Lovable's own scanner; kept what the guide says about row-level security.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C101", "section": "Shift 4: Building a website becomes a prompt", "claim": "A December 2025 study, Vibe Coding in Practice, documents a trade-off between flow and debt: architectural inconsistency, security gaps and maintenance overhead.", "link_text": "Vibe Coding in Practice", "source": "arxiv.org", "url": "https://arxiv.org/pdf/2512.11922", "source_date": "2025-12-11", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "\"Vibe Coding in Practice: Flow, Technical Debt, and Guidelines for Sustainable Use\"; flow-debt trade-off", "original_source": "", "limitation": "Verified via the arXiv abstract page; paper names architectural inconsistencies, security vulnerabilities and maintenance overhead as consequences.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C102", "section": "Shift 4: Building a website becomes a prompt", "claim": "A 2026 paper on spec-driven development argues from the literature that prompt-built output is unreliable and hard to maintain.", "link_text": "2026 paper on spec-driven development", "source": "arxiv.org", "url": "https://arxiv.org/pdf/2607.16680", "source_date": "2026-07-18", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed with caveat", "found_text": "\"Specification-Driven Development as the Foundation of AI-Native Enterprise Software Engineering\" (July 2026)", "original_source": "", "limitation": "Paper is about SDD and names a productivity-reliability paradox and technical debt, but abstract draws on a literature corpus, not practitioner surveys; 'practitioners finding' is not supported as stated.", "action_in_v1_1": "Reworded: the paper argues from the literature; it does not report practitioner findings.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C103", "section": "Shift 4: Building a website becomes a prompt", "claim": "**What it does to agencies and freelancers.** A GoodFirms survey found 98% of agencies using AI, with a third pricing AI-built sites at $500 to $1,500 and a quarter under $500, while complex builds held or raised prices.", "link_text": "GoodFirms survey", "source": "goodfirms.co", "url": "https://www.goodfirms.co/resources/website-construction-cost-survey", "source_date": "", "source_kind": "independent_measurement", "grade": "E2", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "HTTP 403 Cloudflare challenge via WebFetch and curl; 98% / $500-$1,500 / under-$500 figures could not be checked.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C104", "section": "Shift 4: Building a website becomes a prompt", "claim": "A Fast Company and AIGA survey of 1,273 designers and 150 hiring managers found only 14% of managers expecting freelance design needs to shrink, though two-thirds of designers are worried.", "link_text": "Fast Company and AIGA survey", "source": "fastcompany.com", "url": "https://www.fastcompany.com/91571502/freelance-design-pricing-transparency-project-report", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "HTTP 403 via WebFetch and curl (775-byte block page); 1,273 / 150 / 14% / two-thirds figures could not be checked.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C105", "section": "Shift 4: Building a website becomes a prompt", "claim": "Upwork's 2026 in-demand skills report shows demand for AI-referencing skills up 109% year on year with full-stack and graphic design holding.", "link_text": "2026 in-demand skills report", "source": "upwork.com", "url": "https://www.upwork.com/resources/in-demand-jobs-and-skills", "source_date": "", "source_kind": "independent_measurement", "grade": "E2", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "HTTP 403 Cloudflare 'Attention Required' via WebFetch and curl; 109% figure could not be checked.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C106", "section": "Shift 4: Building a website becomes a prompt", "claim": "Agencies describe passing the efficiency on as faster and cheaper delivery of professional work.", "link_text": "faster and cheaper delivery", "source": "925studios.co", "url": "https://www.925studios.co/blog/ai-website-builder-vs-design-agency-2026", "source_date": "2026-03-20", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Not confirmed", "found_text": "\"professional projects can now be delivered faster and at lower cost\"", "original_source": "", "limitation": "Agency blog says efficiency yields faster AND cheaper delivery, contradicting 'rather than lower prices'; no mention of outcome-based pricing. Metadata date 2026-10-20 conflicts with visible 2026-03-20.", "action_in_v1_1": "Reworded to what the page says, faster and cheaper delivery; 'outcome-based pricing' was removed.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C107", "section": "Shift 4: Building a website becomes a prompt", "claim": "The infrastructure for that view is real: Microsoft's NLWeb makes every instance an MCP server over Schema.org and RSS, with a one-click Cloudflare deploy; WebMCP lets a page register typed tools for a browser agent; A2UI and MCP Apps supply the on-demand UI half.", "link_text": "NLWeb", "source": "techcommunity.microsoft.com", "url": "https://techcommunity.microsoft.com/blog/azure-ai-foundry-blog/the-future-of-ai-optimize-your-site-for-agents---its-cool-to-be-a-tool/4434189", "source_date": "2025-07-23", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"Every NLWeb instance also acts as an MCP server\"; builds on \"Schema.org markup, RSS feeds\"", "original_source": "", "limitation": "Microsoft blog about its own project; Cloudflare one-click deploy is not on this page (covered by C107).", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C108", "section": "Shift 4: Building a website becomes a prompt", "claim": "The infrastructure for that view is real: Microsoft's NLWeb makes every instance an MCP server over Schema.org and RSS, with a one-click Cloudflare deploy; WebMCP lets a page register typed tools for a browser agent; A2UI and MCP Apps supply the on-demand UI half.", "link_text": "one-click Cloudflare deploy", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/conversational-search-with-nlweb-and-autorag/", "source_date": "2025-08-28", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"making your site conversational is just a single click\"; \"Each NLWeb instance also operates as a... MCP server\"", "original_source": "", "limitation": "One-click refers to the AutoRAG 'NLWeb Website' quick-deploy option in the Cloudflare dashboard; page modified 2026-07-15.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C109", "section": "Shift 4: Building a website becomes a prompt", "claim": "The infrastructure for that view is real: Microsoft's NLWeb makes every instance an MCP server over Schema.org and RSS, with a one-click Cloudflare deploy; WebMCP lets a page register typed tools for a browser agent; A2UI and MCP Apps supply the on-demand UI half.", "link_text": "WebMCP", "source": "venturebeat.com", "url": "https://venturebeat.com/infrastructure/google-chrome-ships-webmcp-in-early-preview-turning-every-website-into-a", "source_date": "2026-02-12", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "WebMCP \"early preview in Chrome 146 Canary\"; navigator.modelContext registerTool() with typed schemas", "original_source": "Google Chrome Early Preview Program announcement / W3C Web Machine Learning CG (no URL given)", "limitation": "Behind a Chrome flag; spec explicitly scopes out headless autonomous agents, human-in-the-loop only.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "429" }, { "id": "C110", "section": "Shift 4: Building a website becomes a prompt", "claim": "The counter-arguments are also real: agentic browsers are still too small to move traffic, the agent protocols are described as very early even by their advocates, and every agent-first vendor still keeps a crawlable site for search.", "link_text": "still too small to move traffic", "source": "digiday.com", "url": "https://digiday.com/media/no-playbook-just-pressure-publishers-eye-the-rise-of-agentic-browsers/", "source_date": "2025-12-31", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "Agentic browsers \"still nascent\"; a \"3 percent problem\" per anonymous publisher exec", "original_source": "", "limitation": "Support is qualitative: anonymous executive characterisation, no measured traffic share; article also flags Google's agentic Chrome as the looming concern.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C111", "section": "Shift 4: Building a website becomes a prompt", "claim": "The counter-arguments are also real: agentic browsers are still too small to move traffic, the agent protocols are described as very early even by their advocates, and every agent-first vendor still keeps a crawlable site for search.", "link_text": "described as very early", "source": "thenewstack.io", "url": "https://thenewstack.io/the-agentic-web-how-ai-agents-are-shaping-the-webs-future/", "source_date": "2025-09-11", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "MCP-UI, NLWeb and WebMCP \"they're still very early too\"", "original_source": "", "limitation": "The 'very early' wording is the journalist's (Richard MacManus), not an advocate's quote; article also notes Cloudflare and Shopify already ship these in products.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C112", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Crawler control: signals without enforcement.** robots.txt is voluntary and, in the words of RFC 9309, not a form of access authorization.", "link_text": "voluntary", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/control-content-use-for-ai-training/", "source_date": "2025-07-01", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"compliance is voluntary and does not constitute access control\" (on RFC 9309)", "original_source": "RFC 9309 Robots Exclusion Protocol, https://www.rfc-editor.org/rfc/rfc9309", "limitation": "Cloudflare blog paraphrasing the RFC; also says robots.txt is an honor system. Page modified 2026-07-15.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C113", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Crawler control: signals without enforcement.** robots.txt is voluntary and, in the words of RFC 9309, not a form of access authorization.", "link_text": "not a form of access authorization", "source": "rfc-editor.org", "url": "https://www.rfc-editor.org/rfc/rfc9309", "source_date": "2022-09", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "\"These rules are not a form of access authorization.\"", "original_source": "", "limitation": "", "action_in_v1_1": "Added as the primary source for 'not a form of access authorization'.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C114", "section": "Shift 5: Trust, provenance and the rules", "claim": "The IETF AI Preferences group's attach and vocabulary drafts remain working-group documents in Aug and Sep 2026, and its charter puts technical enforcement out of scope.", "link_text": "attach and vocabulary drafts", "source": "datatracker.ietf.org", "url": "https://datatracker.ietf.org/wg/aipref/documents/", "source_date": "", "source_kind": "standard", "grade": "E1", "verification": "Confirmed with caveat", "found_text": "attach-05 (2026-08-18) and vocab-08 (2026-09-13) both listed as \"WG Document\"", "original_source": "", "limitation": "WG-document status in Aug/Sep 2026 confirmed; the documents page says nothing about the charter or enforcement being out of scope.", "action_in_v1_1": "The charter statement now links to the charter page; this page supports the working-group document status.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C115", "section": "Shift 5: Trust, provenance and the rules", "claim": "The IETF AI Preferences group's attach and vocabulary drafts remain working-group documents in Aug and Sep 2026, and its charter puts technical enforcement out of scope.", "link_text": "its charter puts technical enforcement out of scope", "source": "datatracker.ietf.org", "url": "https://datatracker.ietf.org/wg/aipref/about/", "source_date": "", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "Out of scope for this charter: \"Technical enforcement of preferences\"", "original_source": "", "limitation": "", "action_in_v1_1": "Added the working-group charter as the source for enforcement being out of scope.", "last_checked": "2026-10-31", "http_status": "" }, { "id": "C116", "section": "Shift 5: Trust, provenance and the rules", "claim": "Really Simple Licensing, launched in Sep 2025 with Reddit, Yahoo, Medium and O'Reilly, now has over 50 collective partners but no major AI company has adopted it.", "link_text": "Really Simple Licensing", "source": "rslstandard.org", "url": "https://rslstandard.org/press/rsl-standard", "source_date": "2025-09-10", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"September 10, 2025\"; first supporters include Reddit, Yahoo, O'Reilly Media, Medium", "original_source": "", "limitation": "Launch date and the four named companies confirmed; the 50-partner count and AI-company adoption are not on this page (sourced separately).", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C117", "section": "Shift 5: Trust, provenance and the rules", "claim": "Really Simple Licensing, launched in Sep 2025 with Reddit, Yahoo, Medium and O'Reilly, now has over 50 collective partners but no major AI company has adopted it.", "link_text": "over 50 collective partners", "source": "digiday.com", "url": "https://digiday.com/media/arena-group-buzzfeed-usa-today-co-vox-media-join-rsls-ai-content-licensing-efforts/", "source_date": "2025-11-26", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "RSL Collective \"now has over 50 partners\"; AI companies \"are yet to comply\"", "original_source": "", "limitation": "Count attributed to RSL co-founder Doug Leeds as of Nov 2025; non-adoption framed as AI companies not yet complying.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C118", "section": "Shift 5: Trust, provenance and the rules", "claim": "Cloudflare's Content Signals Policy ships three robots.txt signals on 3.8 million domains, framed as rights reservations under the EU Copyright Directive.", "link_text": "Content Signals Policy", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/content-signals-policy/", "source_date": "2025-09-24", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "three signals search, ai-input, ai-train; \"over 3.8 million domains\"; reservations under Article 4 Directive 2019/790", "original_source": "Directive (EU) 2019/790 Article 4, https://eur-lex.europa.eu/eli/dir/2019/790/oj", "limitation": "Managed robots.txt customers get search=yes, ai-train=no by default; the ai-input signal is not set by default.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C119", "section": "Shift 5: Trust, provenance and the rules", "claim": "Google's Search Console opt-out for AI Overviews and AI Mode, announced 2 Jun 2026 as a UK test, is a control that touches those features directly, because they ride on Googlebot rather than the Google-Extended token.", "link_text": "Search Console opt-out", "source": "9to5google.com", "url": "https://9to5google.com/2026/06/02/google-ai-mode-overviews-opt-out/", "source_date": "2026-06-02", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed with caveat", "found_text": "\"new opt-out toggle in the Search Console tool\" for AI Mode and AI Overviews, 2 Jun 2026", "original_source": "", "limitation": "Date and control confirmed, but page does not call it the first such control nor mention Googlebot/Google-Extended; rollout was a UK subset test.", "action_in_v1_1": "Removed 'first control'; noted the UK test scope.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C120", "section": "Shift 5: Trust, provenance and the rules", "claim": "Google's Search Console opt-out for AI Overviews and AI Mode, announced 2 Jun 2026 as a UK test, is a control that touches those features directly, because they ride on Googlebot rather than the Google-Extended token.", "link_text": "Google-Extended token", "source": "developers.google.com", "url": "https://developers.google.com/search/docs/crawling-indexing/google-common-crawlers", "source_date": "2026-10-30", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "\"Google-Extended does not impact a site's inclusion in Google Search\"; no separate user agent", "original_source": "", "limitation": "Page says Googlebot covers all Search features and Google-Extended only governs Gemini training/grounding, but never names AI Overviews or AI Mode.", "action_in_v1_1": "Sentence reworded; this page supports the Googlebot versus Google-Extended distinction without naming AI Overviews.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C121", "section": "Shift 5: Trust, provenance and the rules", "claim": "Cloudflare documented Perplexity using undeclared user agents and rotating networks to evade no-crawl directives at 3 to 6 million requests a day, and Perplexity's own docs say its user-triggered fetcher generally ignores robots.txt.", "link_text": "undeclared user agents and rotating networks", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/perplexity-is-using-stealth-undeclared-crawlers-to-evade-website-no-crawl-directives/", "source_date": "2025-08-04", "source_kind": "independent_measurement", "grade": "E2", "verification": "Confirmed", "found_text": "stealth crawler \"3-6m daily requests\"; rotating IPs and ASNs; ignoring robots.txt", "original_source": "", "limitation": "Cloudflare's own network observation; declared PerplexityBot separately at 20-25m daily requests.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C122", "section": "Shift 5: Trust, provenance and the rules", "claim": "Cloudflare documented Perplexity using undeclared user agents and rotating networks to evade no-crawl directives at 3 to 6 million requests a day, and Perplexity's own docs say its user-triggered fetcher generally ignores robots.txt.", "link_text": "generally ignores robots.txt", "source": "docs.perplexity.ai", "url": "https://docs.perplexity.ai/docs/resources/perplexity-crawlers.md", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"Since a user requested the fetch, this fetcher generally ignores robots.txt rules.\" (Perplexity-User)", "original_source": "", "limitation": "", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C123", "section": "Shift 5: Trust, provenance and the rules", "claim": "OpenAI states that for ChatGPT-User robots.txt rules may not apply.", "link_text": "robots.txt rules may not apply", "source": "developers.openai.com", "url": "https://developers.openai.com/api/docs/bots", "source_date": "", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "\"Because these actions are initiated by a user, robots.txt rules may not apply.\"", "original_source": "", "limitation": "", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C124", "section": "Shift 5: Trust, provenance and the rules", "claim": "Anthropic honours robots.txt and Crawl-delay and publishes its IP ranges.", "link_text": "honours robots.txt and Crawl-delay", "source": "support.claude.com", "url": "https://support.claude.com/en/articles/8896518-does-anthropic-crawl-data-from-the-web-and-how-can-site-owners-block-the-crawler", "source_date": "2026-04-07", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "bots honor robots.txt directives; support Crawl-delay \"where appropriate\"; IP list at claude.com/crawling/bots.json", "original_source": "", "limitation": "Crawl-delay is honoured \"where appropriate\", a qualifier the claim omits.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C125", "section": "Shift 5: Trust, provenance and the rules", "claim": "Cloudflare now offers a robots.txt violations log.", "link_text": "robots.txt violations log", "source": "developers.cloudflare.com", "url": "https://developers.cloudflare.com/changelog/post/2025-10-21-track-robots-txt/", "source_date": "2025-10-21", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "Robots.txt tab in AI Crawl Control to \"identify crawlers that request paths explicitly disallowed\"", "original_source": "", "limitation": "Feature is a dashboard tab, not literally named a \"violations log\"; plan availability not stated.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C126", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Bot identity: a draft becoming a gate.** The IETF Web Bot Auth group passed its April and August 2026 milestones without sending its drafts to the IESG, yet Cloudflare's signed agents class already verifies ChatGPT agent, Goose, Browserbase and Anchor by the draft, and Cloudflare has said Enterprise customers will be able to allow or block that class in security rules.", "link_text": "passed its April and August 2026 milestones", "source": "datatracker.ietf.org", "url": "https://datatracker.ietf.org/wg/webbotauth/about/", "source_date": "", "source_kind": "standard", "grade": "E1", "verification": "Confirmed with caveat", "found_text": "milestones dated 2026-04-30 (two specs to IESG) and 2026-08-31 (BCP to IESG), none marked done", "original_source": "", "limitation": "Page lists the Apr/Aug 2026 milestones as not done; \"missed\" is an inference from today's date, the page does not say so.", "action_in_v1_1": "Reworded: the milestones passed without the drafts reaching the IESG, which is what the page shows.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C127", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Bot identity: a draft becoming a gate.** The IETF Web Bot Auth group passed its April and August 2026 milestones without sending its drafts to the IESG, yet Cloudflare's signed agents class already verifies ChatGPT agent, Goose, Browserbase and Anchor by the draft, and Cloudflare has said Enterprise customers will be able to allow or block that class in security rules.", "link_text": "signed agents", "source": "blog.cloudflare.com", "url": "https://blog.cloudflare.com/signed-agents/", "source_date": "2025-08-28", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed with caveat", "found_text": "first cohort of signed agents: ChatGPT agent, Goose, Browserbase, Anchor Browser; via Web Bot Auth draft", "original_source": "IETF draft-meunier-web-bot-auth-architecture, https://datatracker.ietf.org/doc/html/draft-meunier-web-bot-auth-architecture", "limitation": "Named agents confirmed; the page says Enterprise customers \"will be able to\" act on signed agents in security rules \"soon\", not a live one-rule control.", "action_in_v1_1": "Reworded: Cloudflare said Enterprise customers will be able to act on the class in security rules; not described as a live one-rule control.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C128", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Provenance and labelling have deadlines.** EU AI Act Article 50 applies from 2 Aug 2026.", "link_text": "applies from 2 Aug 2026", "source": "digital-strategy.ec.europa.eu", "url": "https://digital-strategy.ec.europa.eu/en/faqs/signing-code-practice-transparency-ai-generated-content", "source_date": "2026-07-29", "source_kind": "regulation", "grade": "E1", "verification": "Confirmed", "found_text": "\"Article 50 of the AI Act applies from 2 August 2026.\"", "original_source": "", "limitation": "Commission FAQ; describes the 2 Dec 2026 grandfathering for Art. 50(2) as an \"AI Omnibus\" proposal \"if adopted\" at that date.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C129", "section": "Shift 5: Trust, provenance and the rules", "claim": "One transitional provision applies: providers of systems that generate synthetic audio, image, video or text and were placed on the market before 2 Aug 2026 have until 2 Dec 2026 to meet the Article 50(2) marking obligation; no other Article 50 duty is extended, under the Digital Omnibus.", "link_text": "Digital Omnibus", "source": "actuia.com", "url": "https://www.actuia.com/en/news/ai-act-obligations-in-force-and-delays-under-omnibus-2026-1744/", "source_date": "2026-10-06", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "new Art. 111(4): systems placed on market before 2 Aug 2026 have until 2 Dec 2026 for Art. 50(2)", "original_source": "Regulation (EU) 2026/1744 (AI Omnibus), OJ 24 Jul 2026, in force 27 Jul 2026 (EUR-Lex)", "limitation": "Page calls it the AI Omnibus (part of the Digital Omnibus package); it reports no delay for Art. 50(1),(3),(4) but does not enumerate that explicitly.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "000" }, { "id": "C130", "section": "Shift 5: Trust, provenance and the rules", "claim": "China's labelling measures have been in force since 1 Sep 2025.", "link_text": "in force since 1 Sep 2025", "source": "loeb.com", "url": "https://www.loeb.com/en/insights/publications/2025/03/chinas-ai-labeling-measures-and-mandatory-national-standards-take-effect-september-1", "source_date": "2025-03", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed with caveat", "found_text": "Measures for Labeling of AI-Generated Synthetic Content, issued 14 Mar 2025, \"take effect on September 1\"", "original_source": "CAC et al., Measures for Labeling of AI-Generated Synthetic Content (14 Mar 2025)", "limitation": "Article predates entry into force and states the effective date prospectively; year 2025 is implied by context, not stated with the date.", "action_in_v1_1": "No change. The article states the 1 September effective date prospectively; the year follows from its March 2025 date.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C131", "section": "Shift 5: Trust, provenance and the rules", "claim": "California's AI Transparency Act became operative on 2 Aug 2026; it obliges covered AI providers to offer detection tools and latent disclosures, and a separate law requires large online platforms to display provenance data from 1 Jan 2027.", "link_text": "operative on 2 Aug 2026", "source": "infobytes.orrick.com", "url": "https://infobytes.orrick.com/2025-10-17/california-delays-its-ai-transparency-act-and-passes-new-content-laws/", "source_date": "2025-10-17", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "HTTP 403 Cloudflare bot challenge via WebFetch and curl; no Wayback snapshot available. Date taken from URL only.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C132", "section": "Shift 5: Trust, provenance and the rules", "claim": "C2PA Content Credentials are preserved by Cloudflare Images and applied across Adobe tools, and Google announced SynthID and C2PA verification in Search and Chrome in May 2026, but metadata is still stripped on upload by many platforms.", "link_text": "SynthID and C2PA verification in Search and Chrome", "source": "gadgets.beebom.com", "url": "https://gadgets.beebom.com/news/google-synthid-and-c2pa-verification-coming-to-search-and-chrome", "source_date": "2026-05-19", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "announced at I/O 2026: C2PA content credentials verification in Search and Chrome \"along with SynthID\"", "original_source": "", "limitation": "No link to an official Google post; only the May 2026 Google announcement part of the sentence is covered by this page.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C133", "section": "Shift 5: Trust, provenance and the rules", "claim": "Google's spam policy penalises scaled content abuse however it is created, and now names manipulation of generative AI responses as spam.", "link_text": "spam policy", "source": "developers.google.com", "url": "https://developers.google.com/search/docs/essentials/spam-policies", "source_date": "2026-08-28", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "unoriginal content \"no matter how it's created\"; \"attempting to manipulate generative AI responses in Google Search\"", "original_source": "", "limitation": "AI Overviews / AI Mode are not named; the wording is \"generative AI responses in Google Search\".", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C134", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Accessibility is now law and interface at once.** The European Accessibility Act has applied since 28 Jun 2025 to e-commerce, banking and transport, with German fines up to 100,000 euros; microenterprises are largely exempt.", "link_text": "applied since 28 Jun 2025", "source": "gtlaw.com", "url": "https://www.gtlaw.com/en/insights/2025/7/european-accessibility-act-compliance-what-businesses-in-the-eu-market-need-to-know", "source_date": "2025-07-21", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "implemented by Member States by June 28, 2025; e-commerce, banking, transport covered; German fines up to EUR 100,000", "original_source": "Directive (EU) 2019/882 (European Accessibility Act)", "limitation": "Page frames 28 Jun 2025 as the transposition/application deadline; microenterprises (<10 staff, <=EUR 2m) exempt from \"many\" requirements, not all.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C135", "section": "Shift 5: Trust, provenance and the rules", "claim": "The US Department of Justice pushed ADA Title II web deadlines to 26 Apr 2027 and 2028; that rule binds state and local governments, not private businesses, whose exposure remains under Title III case law.", "link_text": "pushed ADA Title II web deadlines", "source": "federalregister.gov", "url": "https://www.federalregister.gov/documents/2026/04/20/2026-07663/extension-of-compliance-dates-for-nondiscrimination-on-the-basis-of-disability-accessibility-of-web", "source_date": "2026-04-20", "source_kind": "regulation", "grade": "E1", "verification": "Confirmed", "found_text": "title II compliance extended to April 26, 2027 (pop. >=50,000) and April 26, 2028 (<50,000, special districts)", "original_source": "", "limitation": "HTML page redirected to a bot-check; content read via the Federal Register API record. Interim final rule effective 20 Apr 2026; Title III point not covered by this page.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C136", "section": "Shift 5: Trust, provenance and the rules", "claim": "WCAG 3.0 remains a working draft with years to go, so WCAG 2.2 AA is the benchmark.", "link_text": "WCAG 3.0", "source": "w3.org", "url": "https://www.w3.org/TR/wcag-3.0/", "source_date": "2026-09-10", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "W3C Working Draft 10 September 2026; \"it still has several years of work\"; \"does not deprecate WCAG 2\"", "original_source": "", "limitation": "", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C137", "section": "Shift 5: Trust, provenance and the rules", "claim": "Research agents consume accessibility-tree snapshots that rely on WCAG-compliant markup; the widely quoted claim that agent success drops from 78% to 42% on inaccessible sites is a vendor figure without a locatable paper and is not relied on here.", "link_text": "rely on WCAG-compliant markup", "source": "arxiv.org", "url": "https://arxiv.org/html/2511.19477v1", "source_date": "2025-11-22", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "accessibility tree snapshots \"rely on WCAG-compliant markup and can miss dynamic behaviors or visual cues\"", "original_source": "", "limitation": "Single-author arXiv preprint (Aram Vardanyan), not peer reviewed; contains no 78%/42% figure, consistent with the claim's disclaimer.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C138", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Privacy: the cookie layer stays, consent fatigue grows.** Google retired most Privacy Sandbox APIs in Oct 2025 and Chrome keeps third-party cookies.", "link_text": "retired most Privacy Sandbox APIs", "source": "privacysandbox.google.com", "url": "https://privacysandbox.google.com/blog/update-on-plans-for-privacy-sandbox-technologies", "source_date": "2025-10-17", "source_kind": "vendor_self_report", "grade": "E3", "verification": "Confirmed", "found_text": "retiring Topics, Protected Audience, Attribution Reporting etc.; Chrome will \"maintain our current approach\" to third-party cookie choice", "original_source": "", "limitation": "Ten technologies retired; CHIPS, FedCM and Private State Tokens retained, so \"most\" is accurate; no phase-out dates given.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C139", "section": "Shift 5: Trust, provenance and the rules", "claim": "Only 5.4% of users configure cookie settings; the EU Digital Omnibus proposed a six-month no-re-ask rule, dropped from the Council's June 2026 compromise text and still in negotiation.", "link_text": "5.4% of users configure cookie settings", "source": "fr.themedialeader.com", "url": "https://fr.themedialeader.com/seuls-54-des-internautes-parametrent-leurs-cookies-selon-une-etude", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Not re-checked (HTTP 403 on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "HTTP 403 via WebFetch and curl; 5.4% figure and underlying study could not be verified.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "403" }, { "id": "C140", "section": "Shift 5: Trust, provenance and the rules", "claim": "Only 5.4% of users configure cookie settings; the EU Digital Omnibus proposed a six-month no-re-ask rule, dropped from the Council's June 2026 compromise text and still in negotiation.", "link_text": "proposed a six-month no-re-ask rule", "source": "usercentrics.com", "url": "https://usercentrics.com/knowledge-hub/eu-digital-omnibus-package/", "source_date": "", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed with caveat", "found_text": "proposal: organisations \"cannot re-request consent for the same purpose for six months\"; Data Omnibus \"remains in negotiation\"", "original_source": "European Commission Digital Omnibus proposal, 19 Nov 2025", "limitation": "Same page says the Council's June 2026 compromise text removed the six-month moratorium article; whether it returns is unsettled, so \"proposes\" is dated.", "action_in_v1_1": "Added that the Council's June 2026 compromise text dropped the six-month rule.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C141", "section": "Shift 5: Trust, provenance and the rules", "claim": "India's Digital Personal Data Protection Rules were notified on 14 Nov 2025, per MeitY's rules and enforcement timeline; the accompanying commencement notification, a Gazette instrument dated 13 Nov 2025, brings the Act's provisions into force in phases from the publication date: specified Data Protection Board provisions took effect immediately; the consent-manager registration provisions take effect on 14 Nov 2026; and the core data-protection obligations, including notice, consent, breach and data-principal rights provisions, take effect on 14 May 2027.", "link_text": "MeitY's rules and enforcement timeline", "source": "meity.gov.in", "url": "https://www.meity.gov.in/documents/act-and-policies/digital-personal-data-protection-rules-2025-gDOxUjMtQWa?pageTitle=Digital-Personal-Data-Protection-Rules-2025", "source_date": "", "source_kind": "regulation", "grade": "E1", "verification": "Not re-checked (page unreadable on 2026-10-31)", "found_text": "", "original_source": "", "limitation": "WebFetch returned 403; curl returned an empty Next.js shell and the browser pane rendered a blank page titled 'Digital Personal Data Protection Rules 2025'.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C142", "section": "Shift 5: Trust, provenance and the rules", "claim": "India's Digital Personal Data Protection Rules were notified on 14 Nov 2025, per MeitY's rules and enforcement timeline; the accompanying commencement notification, a Gazette instrument dated 13 Nov 2025, brings the Act's provisions into force in phases from the publication date: specified Data Protection Board provisions took effect immediately; the consent-manager registration provisions take effect on 14 Nov 2026; and the core data-protection obligations, including notice, consent, breach and data-principal rights provisions, take effect on 14 May 2027.", "link_text": "commencement notification", "source": "meity.gov.in", "url": "https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf", "source_date": "2025-11-13", "source_kind": "regulation", "grade": "E1", "verification": "Confirmed with caveat", "found_text": "Gazette No. 757, G.S.R. 843(E), \"New Delhi, the 13th November, 2025\"; digitally signed 2025-11-14", "original_source": "", "limitation": "This 2-page instrument is the commencement notification for sections of the DPDP Act (immediate / 1 year / 18 months), not the text of the DPDP Rules themselves.", "action_in_v1_1": "Identified the instrument as the commencement notification for the Act's provisions, not the Rules text.", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C143", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Security: your page is an attack surface for someone else's agent.** Brave showed hidden Reddit text making Comet read a user's email and leak a one-time code; OpenAI's Lockdown Mode concedes it cannot guarantee against exfiltration; EchoLeak was a zero-click injection against Microsoft 365 Copilot.", "link_text": "read a user's email and leak a one-time code", "source": "brave.com", "url": "https://brave.com/blog/comet-prompt-injection/", "source_date": "2025-08-20", "source_kind": "primary_research", "grade": "E1", "verification": "Confirmed", "found_text": "Reddit comment hidden behind spoiler tag; Comet opened Gmail, read the OTP, exfiltrated it by replying on Reddit", "original_source": "", "limitation": "Security research published by Brave, a competing browser vendor, about Perplexity's Comet; the email read was the user's Perplexity account email plus Gmail OTP.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C144", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Security: your page is an attack surface for someone else's agent.** Brave showed hidden Reddit text making Comet read a user's email and leak a one-time code; OpenAI's Lockdown Mode concedes it cannot guarantee against exfiltration; EchoLeak was a zero-click injection against Microsoft 365 Copilot.", "link_text": "Lockdown Mode", "source": "itbrief.com.au", "url": "https://itbrief.com.au/story/openai-unveils-lockdown-mode-to-counter-prompt-attacks", "source_date": "2026-02-16", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "Lockdown Mode \"does not deterministically prevent prompt injections\"; aims to \"reduce the chance\" of data exfiltration", "original_source": "", "limitation": "Lockdown Mode is a ChatGPT (Enterprise/Edu/etc.) setting; \"concedes it cannot guarantee\" is a fair paraphrase; no OpenAI link on page.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C145", "section": "Shift 5: Trust, provenance and the rules", "claim": "**Security: your page is an attack surface for someone else's agent.** Brave showed hidden Reddit text making Comet read a user's email and leak a one-time code; OpenAI's Lockdown Mode concedes it cannot guarantee against exfiltration; EchoLeak was a zero-click injection against Microsoft 365 Copilot.", "link_text": "EchoLeak", "source": "vectra.ai", "url": "https://www.vectra.ai/topics/prompt-injection", "source_date": "2026-05-15", "source_kind": "secondary_reporting", "grade": "E4", "verification": "Confirmed", "found_text": "\"EchoLeak (CVE-2025-32711, CVSS 9.3)\", zero-click exfiltration via one email to a Microsoft 365 Copilot user", "original_source": "", "limitation": "Vendor explainer page; does not name the discoverer (Aim Security) or a disclosure date.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" }, { "id": "C146", "section": "Shift 5: Trust, provenance and the rules", "claim": "The OWASP Top 10 for LLM applications lists prompt injection, excessive agency and improper output handling.", "link_text": "OWASP Top 10 for LLM applications", "source": "genai.owasp.org", "url": "https://genai.owasp.org/llm-top-10/", "source_date": "", "source_kind": "standard", "grade": "E1", "verification": "Confirmed", "found_text": "2025 list: LLM01 Prompt Injection, LLM05 Improper Output Handling, LLM06 Excessive Agency", "original_source": "", "limitation": "Current version is the 2025 edition.", "action_in_v1_1": "", "last_checked": "2026-10-31", "http_status": "200" } ], "interpretations": [ { "id": "I01", "statement": "AI Overviews explain roughly half of the click decline; the rest is Google keeping users on Google.", "where": "Open questions and bets, row 1", "kind": "Research interpretation", "rests_on": "Ahrefs control group (C-series, Shift 1), Seer Interactive CTR on queries without Overviews, Pew click rates; Google disputes all three methods.", "falsifier": "A Google-published or independently instrumented split of clicks lost to Overviews versus other interface changes." }, { "id": "I02", "statement": "AI-referred traffic converts better for now, partly a novelty and intent-mix effect.", "where": "Open questions and bets, row 2", "kind": "Research interpretation", "rests_on": "Similarweb 7% vs 5% and Adobe's +42% after −38%; different baselines and windows.", "falsifier": "Two consecutive measurement periods in which AI-referred conversion matches or trails search on a like-for-like basis." }, { "id": "I03", "statement": "Citations are decoupling from rankings, but the measured series is unstable across model changes.", "where": "Open questions and bets, row 3", "kind": "Research interpretation", "rests_on": "Ahrefs 76% to 38% overlap, BrightEdge about 17%, earlier claims of 93%.", "falsifier": "A stable overlap series across at least two model releases, in either direction." }, { "id": "I04", "statement": "Catalog composition is the production ceiling for generative UI for at least two years; free-form page generation stays an experiment.", "where": "Open questions and bets, row 4; Shift 3; Executive summary", "kind": "Strategic hypothesis", "rests_on": "Every shipping implementation reviewed (A2UI, json-render, Apps in ChatGPT, MCP Apps, Thesys) composes from developer-defined components; Google's free-form experiment runs at minute-scale latency.", "falsifier": "A free-form generative interface in commercial production with sub-second latency and measured task completion at parity with a fixed interface." }, { "id": "I05", "statement": "Discover in AI, buy on site is the equilibrium for agentic commerce through 2027.", "where": "Open questions and bets, row 5", "kind": "Strategic hypothesis", "rests_on": "Each payment network has a protocol; about 30 live Shopify stores is the only hard adoption number; OpenAI moved product discovery to buy-on-site.", "falsifier": "Published merchant volume through in-chat checkout above a few percent of any major merchant's orders." }, { "id": "I06", "statement": "WebMCP stays a Chrome and Edge in-page feature for the foreseeable future.", "where": "Open questions and bets, row 6", "kind": "Strategic hypothesis", "rests_on": "Chrome and Edge origin trials; no Firefox or Safari position; headless agents are a stated non-goal.", "falsifier": "A Firefox or WebKit implementation intent, or a headless-agent profile in the specification." }, { "id": "I07", "statement": "Licensing of content for AI settles through litigation, bilateral deals and CDN tolls rather than through voluntary signals.", "where": "Open questions and bets, row 7", "kind": "Strategic hypothesis", "rests_on": "Over 50 publishers in the RSL Collective and no AI company honouring it; IETF AI Preferences drafts without enforcement; Cloudflare pay-per-crawl.", "falsifier": "A major AI company publicly committing to honour RSL or AI Preferences signals in production crawling." }, { "id": "I08", "statement": "Web Bot Auth becomes a gate enforced by CDNs before the IETF finishes it.", "where": "Open questions and bets, row 8", "kind": "Strategic hypothesis", "rests_on": "Cloudflare, Google and AWS already sign or verify; the working group missed its milestones.", "falsifier": "CDNs dropping signed-agent allowlisting, or the IETF publishing an incompatible final standard that deployments adopt instead." }, { "id": "I09", "statement": "Content provenance survives patchily; enforcement reaches model providers and large platforms before ordinary websites.", "where": "Open questions and bets, row 9", "kind": "Strategic hypothesis", "rests_on": "C2PA preserved by Cloudflare and Adobe, stripped by most social platforms; EU AI Act Article 50 enforcement untested.", "falsifier": "A regulator's first Article 50 enforcement action naming a website operator rather than a model or platform provider." }, { "id": "I10", "statement": "Prompt-built sites have commoditised the template, copy and layout of a website; the defensible work has moved to the data model, integrations, security review and maintenance.", "where": "Shift 4, opening paragraph", "kind": "Editorial estimate", "rests_on": "Builder revenue and adoption figures (Shift 4), the GoodFirms and Fast Company price surveys, the Lovable misconfiguration assessment. v1.0 stated this as 'roughly the first 80%'; v1.1 removes the percentage because no measurement supports a number.", "falsifier": "A measured breakdown of effort or price per layer across a sample of real projects." }, { "id": "I11", "statement": "Accessibility is the investment most likely to serve both the law and the agents.", "where": "Executive summary; Shift 5", "kind": "Research interpretation", "rests_on": "Browser agents documented as reading the accessibility tree (Shift 2); EAA and ADA Title II deadlines (Shift 5); WCAG compliance does not guarantee agent success.", "falsifier": "Agent task-completion measurements showing no advantage for WCAG-conformant pages over non-conformant ones (prototype 1 is the first such measurement)." }, { "id": "I12", "statement": "Sysbot's position should be AI-ready website infrastructure, not another AI website builder.", "where": "Executive summary; Strategic position", "kind": "Strategic hypothesis", "rests_on": "Price collapse of simple sites (Shift 4), protocols ahead of commercial adoption (Shift 2), four candidate opportunities none of which is commercially validated.", "falsifier": "The prototype programme's commercial validation step: no measured customer willingness to pay for any of the four candidates." } ] }