Mike Sendall's two words, scribbled on the cover of Tim Berners-Lee's proposal. CERN's hypertext system was born from a knowledge-loss problem. Two years was a typical length of stay; information kept walking out the door.
This proposal concerns the management of general information about accelerators and experiments at CERN. It discusses the problems of loss of information about complex evolving systems and derives a solution based on a distributed hypertext system.
→ Tim Berners-Lee · "Information Management: A Proposal" · 12 March 1989
● generation 01 · timeline
19 YEARS. FROM PROPOSAL TO CHROME.
1989-03-12Berners-Lee submits "Information Management" to Mike Sendall, CERN
1990-12-20First website (info.cern.ch) goes live on a NeXT cube
1991-08-06TBL posts to alt.hypertext announcing WWW. HTTP/0.9 ships
1993NCSA Mosaic. The first popular browser
1994-12-15Netscape Navigator 1.0
1995-08-16Internet Explorer 1.0 ships with Windows 95 Plus!
HTTP 402 WAS RESERVED IN 1999. it sat DORMANT for 27 YEARS.
RFC 2616 (1999) · restated verbatim in RFC 7231 §6.5.2 (2014) and RFC 9110 §15.5.3 (2022): "The 402 (Payment Required) status code is reserved for future use."
→ that future arrived on April 2, 2026. see slide 16.
● generation 02 · the searchable web
February 25, 1994 · www-talk mailing list
A ROGUE CRAWLER DDOSED KOSTER'S SITE.
Martijn Koster, then at Nexor, wrote a single text file to ask robots to go elsewhere. He proposed it on the www-talk mailing list. By June 1994 WebCrawler, Lycos, and AltaVista honored it. The first publisher-to-machine contract.
[robots.txt is] a method of guiding robots away from certain areas in a Web server's URL space, by providing a simple text file on the server.
→ Martijn Koster · A Standard for Robot Exclusion · 1994 · formalized 28 years later as RFC 9309
● generation 02 · 30 years of crawler contracts
EACH ARTIFACT IS A PROMISE TO A MACHINE.
1994-02-25Martijn Koster proposes robots.txt on www-talk
2005-06Google launches Sitemaps 0.84 (XML site index)
2006-11Google + Yahoo + Microsoft adopt sitemaps.org jointly
2010-04RFC 5785 defines the /.well-known/ URI prefix
2010-04-21Facebook launches Open Graph at f8. Every page is an object
2011-06-02Schema.org launches (Google + Bing + Yahoo, then Yandex)
2019-05RFC 8615 updates /.well-known/ for HTTPS/WSS/non-Web URIs
2022-09RFC 9309 formalizes robots.txt (28 years late)
2024-09-03Jeremy Howard / Answer.AI proposes /llms.txt
→ a 30-year publisher-to-machine vocabulary. seven artifacts. all still in production.
● generation 03 · the agentic web
November 25, 2024 · Anthropic launches MCP
EIGHTEEN MONTHS FROM PROTOCOL TO PRODUCTION.
Anthropic open-sourced the Model Context Protocol. By Dec 9, 2025 it was donated to the Linux Foundation under a new Agentic AI Foundation. Google's A2A donated June 23, 2025. x402 Foundation formed April 2, 2026. The stack was assembled inside a single calendar year by every hyperscaler that matters.
Open-source software is essential for building a secure and innovative ecosystem for agentic AI.
→ Anthropic · MCP donation to Linux Foundation · December 9, 2025
● generation 03 · the 18-month sprint
THE STACK WAS ASSEMBLED WHILE YOU WEREN'T LOOKING.
→ RFC 8615 well-known URIs · Anthropic MCP · Google A2A · W3C WebMCP · Aiia ai-agent.json · x402 Foundation · Linux Foundation Agentic AI Foundation (AAIF)
● layer 04 · execution · agent ↔ tool
MCPmodel context protocol · anthropic to linux foundation
More than 10,000 active public MCP servers, covering everything from developer tools to Fortune 500 deployments.
9,400+ public servers · 7.8× YoY through Q1 2026
78% of enterprise AI teams have one in production
Anthropic → Linux Foundation Agentic AI Foundation · Dec 9, 2025
+35% average order value · half of all app users have tried it
Klarna
2/3 of customer service chats handled by AI · work of 853 FTEs · 82% resolution-time cut · $60M cost saving
Shopify (The Renaissance)
Full re-architecting around agentic commerce. Checkout MCP. Catalog API live to ChatGPT, Copilot, Perplexity.
Adobe Analytics
AI-referred shoppers convert +31% more · AI traffic to US retail +693% holiday 2025 · Shopify AI orders 15× YoY
Perplexity Buy with Pro
5,000+ merchants via PayPal partnership · launched Nov 2024 · early agentic-commerce mover
● the part nobody puts on a keynote
THE HONEST CUT.
Our agents are like really good interns. You'd never leave them unsupervised on anything that matters.
→ MachineBrief · State of AI Agents 2026
Gartner: only 17% of orgs have actually deployed agents.
Gartner: 40%+ of agentic AI projects predicted cancelled by 2027.
Klarna CEO walked back: "we need to rebuild human expertise."
Humane AI Pin: dead. $230M raised. Sold to HP for $116M.
Rabbit R1: mass returns. RabbitOS 2 quietly dropped "autonomous."
The new law. The interface vanishes for agents. It persists for humans.Hybrid won.
● ACT V the 21-point readiness audit
21 CHECKS. 5 LAYERS.
Cloudflare published the Agent Readiness Score on April 17, 2026. Same week, Anthropic donated MCP. Same month, x402 activated. Same fortnight, FIDO chartered Agentic Auth.
The audit is no longer aspirational. It is a checklist.
Your turn. We'll click through all 21 in two minutes.
THE WALL OF 21. average website scores 38/100.
none of 62 cf-tested domains scored above 70
01agent-card.jsonD
02mcp.jsonD
03ai-agent.jsonD
04llms.txt + robotsD
05Markdown negoC
06Schema.org ActionC
07LLMFeed exportC
08Ed25519 sigsT
09Content-SignalT
10MCP serverE
11SKILL.mdE
12a11y treeE
13WebMCPE
14A2A endpointA
15Agent card shapeA
16ObservabilityX
17MemoryX
18Durable execX
19Tool authX
20Agent CI/CDX
21Live verifyX
DiscoveryContentTrustExecutionA2ACross-cutting
01
DISCOVERY · 4 checks · free, static files
01 A2A · RFC 8615
agent-card.json
/.well-known/agent-card.json
The de facto entry point. Declares your service, capabilities, A2A endpoint, auth posture. Without it, no agent finds you outside hand-coded integrations.
1 hour · free · open discovery is irreversible once registries cache
02 MCP · PR #2127
mcp.json
/.well-known/mcp.json
Sister to agent-card. Tells MCP-only clients (Claude Desktop, ChatGPT, Cursor) where your server lives, what transport, what auth flow.
30 min · free · CORS Access-Control-Allow-Origin or WebMCP breaks
03 Aiia · March 28, 2026
ai-agent.json
/.well-known/ai-agent.json
Aiia-flavored manifest. Different registry from agent-card.json. Ship BOTH; cost is zero and indexers diverge.
30 min · free · shipped 6 weeks before today. retro-fit later or now
04 Howard / Koster
llms.txt + robots.txt
/llms.txt (NOT well-known) + /robots.txt
Curated site map for LLMs plus crawler-class distinction (training vs search vs agents). Anthropic ships llms.txt while their own research shows mixed results. Ship anyway. Cost zero.
1 hour · free · llms.txt sits at root, NOT /.well-known/
02
CONTENT · 3 checks · 80% token savings
05 Cloudflare · accept: text/markdown
Markdown content negotiation
Agents pay per token. Serving HTML burns 5× more tokens than the same content as Markdown. The cheapest single optimization on the audit. CF Markdown is bundled in Workers Paid.
Structured data on key pages PLUS Schema.org Action declarations on functional touchpoints. Without Action, agents read but can't bind to verbs. With it, every product page becomes an MCP-equivalent.
2-4 hours per template · partial credit if Action missing
07 WellKnownMCP · v2.1
LLMFeed export
Static signed JSON feeds at well-known URIs. Required input for the trust layer (Ed25519 + LLMCA cert). Skipping it cascades into Layer-3 misses.
4-8 hours · free · LLMCA cert wraps the signature at $99/yr
03
TRUST · 2 checks · before the agents start spending
08 Ed25519 · LLMFeed
Content signatures
Cryptographic provenance and integrity on your feeds. Once agents spend money (x402) and delegate authority (A2A), provenance becomes load-bearing. No signature, no third-party trust.
2-3 hours · free · key pair plus signing step in build
09 Cloudflare · HTTP headers
Content-Signal headers
Legible consent flags for crawler classes. ai-train, search, ai-input. Without them, every agent and trainer must guess your policy. With them, you have a defensible "no" for training and "yes" for inference.
30 min · free · cheapest future-proofing on the audit
04
EXECUTION · 4 checks · the actual product surface
10 MCP · Streamable HTTP
Remote MCP server
How agents take actions on your stack. Stdio transport is dev-only. Production = Streamable HTTP plus real OAuth. Edge-deploy (CF Workers + Durable Objects) preferred.
1-2 weeks · $5+/mo · stdio in production = auto-fail
11 Anthropic Skills
SKILL.md (cross-platform)
Cross-platform capability declaration. Frontmatter description + body teaches agents how to use your tool. Skills ship to Claude, ChatGPT, Cursor, Copilot. Plugins are Claude-Code-only.
4-8 hours · free · description must be "pushy" or skill never invokes
12 ARIA · semantic HTML
Accessibility tree
Real <button> and <a> tags, not <div onClick>. Agents read the accessibility tree, not your JS handlers. SPA-only without SSR shows agents a blank page.
P19 · #1 production fail · 0 of 62 CF-tested sites scored >70 because of this
13 W3C · navigator.modelContext
WebMCP exposure
Browser-side tools via navigator.modelContext. Same DOM, two callers: humans click, agents call, both hit the same handler. No server required, inherits browser session.
1-3 days · free · Chrome 146 flag-gated; ship server MCP first
05
A2A · 2 checks · how agents delegate
14 Google A2A · JSON-RPC 2.0
A2A endpoint live
Agent-to-agent JSON-RPC handler. Other agents call yours, you can call theirs. Most production systems run MCP and A2A simultaneously. MCP is for tools, A2A is for delegation.
1-2 weeks · $0-50/mo · open A2A without auth field = auto-fail
15 A2A · agent-card schema
Agent card correct shape
Same file as check 01, graded on COMPLETENESS. Declares capabilities, auth, A2A endpoint, works with the live endpoint from check 14. Bearer tokens in URL params instead of Authorization header = auto-fail.
incremental from #01 · default authenticated, open is opt-in
X
CROSS-CUTTING · 6 checks · the connective tissue
16 Braintrust · Galileo · Helicone
Observability
Trace every agent call with per-call eval scores. Agent failures are non-deterministic; without per-call evals you cannot debug, regress, or roll back. Free tier on Braintrust is 10k traces/mo.
1-2 days · $0-99/mo · shipping blind is auto-fail
17 Mem0 · Zep · Letta · CF
Persistent memory
Agents without memory restart context every call. Mem0 = user preferences, Zep = temporal knowledge graph, Letta = LLM-managed. Pick by USE CASE, not LOCOMO benchmark.
1 day · $20-99/mo · CF Agent Memory bundled in Workers Paid
18 Inngest · CF Workflows · Temporal
Durable execution
Avoids re-running expensive steps on retry. Each step checkpointed. A network blip should not re-spend the LLM and tool budget. Pick before architecture, migration is expensive.
2-3 days · $0-200/mo · CF Workflows caps at 50k concurrency, not infinity
19 Composio · Arcade
Tool auth · 500+ integrations
Stop rebuilding tool integrations. Composio has 500+ OAuth-wired apps (Gmail, Slack, Linear, Notion, Stripe). Arcade has 112. Hand-rolled OAuth is a year of bugs you don't need.
P5 · hand-rolled = auto-fail · $49-150/mo at 100 tenants
20 GitHub Actions · skill-validate
Agent CI/CD
MCP-validate + Skill-validate + A2A conformance + behavioral evals + canary deploy + telemetry-gated rollback. Agentic regressions are silent. Only behavioral evals catch them before users do.
2-3 days · free · GitHub Actions covers it
21 isitagentready.com
Live verification
Post-deploy scan against Cloudflare's free Agent Readiness scanner. Self-attestation is unreliable. Third-party proof is the only way to know the other 20 checks actually shipped.
5 min · free · average site scores 38/100; aim for 18+/21
● ACT VI exhibits · what an agent-native site looks like
Exhibit A
Immersive Commonsthe agent-native venue · floor10 · ft sf
The harness is the product. Don't rebuild infrastructure that Cloudflare, Anthropic, Composio, Mem0, Braintrust, and x402 ship as managed services. Compose, don't reinvent.
Pre-wired OAuth for Gmail, Slack, Linear, Notion, Stripe, and 495+ others. Per-user scopes. Eliminates the year-of-bugs hand-roll.
$49/mo Pro + $0.50 to $2 per 1k actions
Persistent memoryMem0 · Zep · Letta
Mem0 = user preferences. Zep = temporal knowledge graph. Letta = LLM-managed (LOCOMO 83.2%). Pick by use case, not benchmark.
$20 to $99/mo at low scale · CF bundles its own
Observability + evalBraintrust
Per-call traces, automated scorers, drift detection. Loop AI for custom scorers. There is no excuse to ship agents blind.
Free tier 10k traces · $99/mo for 100k
Autonomous paymentsx402 + Stripe Agent Toolkit
HTTP 402 stablecoin paywall (USDC on Base) plus Stripe Shared Payment Tokens for human-merchant flow. Ship the paywall even at $0.001.
x402 facilitator free at low volume · Stripe 2.9% + $0.30 per txn
● the costs nobody quotes
$15/MONTH AT ONE TENANT. $1,100 AT 100.
Scale
Lean managed (CF + Anthropic)
Hybrid
Self-hosted (Hetzner + OSS)
1 tenant (founder)
~$15/mo
~$25/mo
~$20/mo
10 tenants
~$120/mo
~$200/mo
$20 to $100/mo
~50 tenants · CROSSOVER
managed wins on ship-speed
—
self-host wins on cost
100 tenants
~$1,100/mo
~$1,800/mo
$100 to $500/mo
1,000 tenants
~$11,000/mo
~$18,000/mo
$500 to $2,500/mo
10,000 tenants
~$110,000/mo
~$180,000/mo
$5,000 to $25,000/mo
→ agentify · references/18-cost-estimator.md · May 2026 snapshots. crossover at ~50 tenants. plus hidden lines: SOC 2 ($15-30k once + $5-10k/yr), EU AI Act limited-risk ($2-5k legal), Clerk/Auth0, PagerDuty, Sentry.