BotConduct.
The Agentic Web · a map of who sees what
The agentic web is being built from the side that cooperates.
Identity, discovery, deployer control — every layer assumes an agent that declares itself, advertises itself, or belongs to you. One layer is missing: the agent that does none of that, observed from the side that receives it.
Layer · who's building itWhat it depends on
Identity
who the agent claims to be
Okta
needs it to declare
Discovery
what it advertises it can do
Google
needs it to publish
Edge & transport
how its traffic moves and caches
Cloudflare
needs it to route through
Deployer control
what your own agent does inside
Google DeepMind
needs you to own it
the surface
Observed conduct
what an agent actually does, regardless of what it claims to be
BotConduct
needs nothing — observed
Empirical
Measured today, not modeled.Roadmaps describe the problem; the index reports it.
Versioned
A published taxonomy with a DOI.Public, versioned, citable.
Independent
Observed from the receiving side.Neutral — not the operator judging itself.
Identity governs the agent that asks permission.Conduct measures the one that doesn't.