Agents aren’t humans (but they kinda are)

This post argues that remotely hosted personal AI Agents act as intermediaries between Users and Sites, stripping Sites of the identity, reputation and accountability signals they rely on for security, fraud prevention and monetization. It proposes the Intermediation Principle and surveys emerging standards — Web Bot Auth, MOLE, OAuth, AIPREFs and the new Trusted Agent Delegation coalition — while noting Cloudflare's new tools for seeing Agents, setting per-Agent access policies, and tying Agents back to users via Account Abuse Protection.