Field Notes
What we learn building infrastructure for the next generation of the web. Research, technical deep-dives, opinion.
Prompt injection and agent impersonation are two operational attack vectors targeting agentic commerce in 2026. DataDome tracked 16.4M spoofed Meta-ExternalAgent requests in two months alone. Here’s how both…
Read →UCP — co-developed by Google and Shopify — defines how AI shopping agents discover your catalog, negotiate terms, and execute purchases directly. Here is what it is, which…
Read →Visa TAP, Google AP2, and FIDO are each solving agent identity differently. Here’s how the three competing standards work, where they diverge, and what commerce sites should implement…
Read →AI shopping agents and AI assistants read structured data, not marketing prose. Here are the Schema.org properties that determine whether your site gets selected or skipped — and…
Read →On June 17, 2026, Google and ten major tech partners published the Agentic Resource Discovery spec. As of this writing, adoption is near zero — including among the…
Read →GA4 added a native AI Assistant channel on May 13, 2026, showing which humans clicked through from ChatGPT, Gemini, and Claude. But it can’t see the AI crawlers…
Read →Most sites treat all AI bots the same. This four-tier access control framework separates training crawlers, search agents, and shopping bots — giving each the right policy while…
Read →Google Lighthouse 13.3 now audits for llms.txt as part of its Agentic Browsing category. This guide explains what the standard is, what it realistically does in 2026, and…
Read →Ten concrete steps to make your website agent-ready — from AI traffic baselines and crawler policy to structured data, MCP endpoints, and verification.
Read →The Agent Readiness Score is a number from 0 to 100 that summarizes how well a site can be read, verified, and transacted with by an autonomous AI.…
Read →If your site is invisible to agents today, it will be invisible to a meaningful slice of buyers tomorrow. The math is changing fast.
Read →Half of the next decade's web traffic will be agents. Most sites can't tell any of them apart from humans. That's the agentic web problem in one sentence.
Read →