Ready for shopping season: Verifying and authorizing buying agents
Presented by: Tim Simeonov
Originally aired on October 23 @ 5:30 AM - 6:00 AM EDT
2026 is the year of the agent. At Experian, we think it ends as the year of the shopping agent. Bot managers block non-browser traffic by default, so agents carrying real revenue get blocked with the bad bots. Admitting the good ones requires answering four questions. Cloudflare’s Web Bot Auth answers one: did this key send this request unmodified? Experian Agent Trust answers the other three: is a verified human bound to the agent, is there approval of the exact cart, and is there no sign of hijacking? In this session, we build all four at the Cloudflare edge on Workers and Durable Objects and then stress-test them live: unknown agent, replay, repriced cart, and weak human binding. Nothing is charged. Leave with the reference architecture and a clear understanding of what each layer catches.
English
