infoexperimentaldiscoverability
A cryptographically verifiable agent request reached the site
AGENT-ID-001 · v1.0
Computed by Scovant Cloud — this check needs Scovant's own agent-identity fetch, which the open-source engine does not perform.
What it detects
A homepage request signed with Scovant's published Web Bot Auth key (RFC 9421, Ed25519) was served without a block or challenge.
Why it matters
A capability marker, never a defect: it shows the edge does not refuse agents that identify themselves cryptographically. Absence of this marker is not a finding.
How to fix
No action needed. This is recorded as evidence of a healthy posture: your edge serves a request that carries a valid Web Bot Auth signature without a block or challenge. Keep the signed-request allow path as-is.
Example
GET / (signed, Signature-Agent: bot.scovant.com) -> 200 OK
References
Last reviewed: 2026-09-01 · rule v1.0