The Agentic Web: A Map of Who Sees What

The agentic web is being built from the side that cooperates — and one layer is still open.

The agentic web is being built from the side that cooperates.

Identity, discovery, edge, deployer control — every layer now under construction assumes an agent that declares itself, advertises itself, routes through you, or belongs to you. Each is real and necessary. And each shares the same blind spot: none of them observes the third-party agent that does none of those things, from the side that receives it.

• Identity — who the agent claims to be. Needs the agent to declare. (Okta and others are building this.)
• Discovery — what the agent advertises it can do. Needs the agent to publish. (Google's resource-discovery work.)
• Edge & transport — how the agent's traffic moves and caches. Needs the agent to route through you. (Cloudflare and the broader CDN layer.)
• Deployer control — what your own agent does inside. Needs you to own it. (Google DeepMind's runtime-supervision direction — which the authors themselves describe as based on theorising rather than empirical data.)

Read the dependency column top to bottom: declare → publish → route → own. Every layer needs the agent to cooperate, or needs you to own it. Then there is the layer that needs neither.

Observed conduct — what an agent actually does, regardless of what it claims to be. Observed from the receiving surface. It needs nothing from the agent: no declaration, no cooperation, no ownership. It is the only vantage point that sees the agent that doesn't ask permission.

This is the layer BotConduct occupies. Not a replacement for identity, discovery, edge, or deployer control — a complement. Identity governs the agent that asks permission; conduct measures the one that doesn't.

Three things make the receiver-side, observed-conduct layer distinct from everything else on the map:

• Empirical. It is measured today, not modeled. The frontier work on agent control is, by its own admission, theoretical. Conduct on receiving surfaces is being recorded now.
• Public and citable. The vocabulary is a published, versioned taxonomy with a DOI (10.5281/zenodo.20709421) — not a private framework.
• Independent. It is observed from the receiving side, neutral to the operator. Deployer-side control is the operator watching itself; observed conduct is a third party watching what arrives.

It does not enter the agent. It does not read reasoning, weights, prompts, or internal state. It observes conduct at the surface — what crossed, not what was thought. It attributes no intent and issues no judgment about the actor; it records what was observed, on the surfaces observed, with a frozen and versioned method.

A photograph of where the agentic web actually stands: built from the cooperative side, with one layer still open. That layer is conduct, observed.