The cat-and-mouse game between AI agents and bot detection is getting more sophisticated every month.

What's interesting is that legitimate use cases (accessibility tools, testing automation, research crawlers) get caught in the same net as malicious scrapers. The fingerprinting techniques that detect "non-human" behavior often flag perfectly reasonable automated workflows.

We're heading toward a future where AI agents need to authenticate their intent, not just their identity. Maybe something like signed agent manifests that declare what they're doing and why.