A large financial institution recently noticed what looked like a significant decline in organic traffic. Their share had dropped to around 11 percent of total traffic, alarming by any measure.
The deeper analysis told a different story.
Organic traffic had actually increased. What changed was the explosion of direct traffic, much of it generated by AI bots. The old distinction between human users and automated systems was no longer sufficient. Something new was accessing their content, at scale, without leaving a clear trace.
This is the infrastructure problem at the heart of the agentic web. And it starts with a question most businesses have not yet asked: who is acting on your customer’s behalf and can you verify it?
The Delegation Boundary
There is a precise moment in every transaction where a human stops deciding and a machine starts acting. A shopper asks an AI assistant to compare prices and book the better option. A customer authorizes an agent to renew a subscription automatically. A buyer lets an agent negotiate on their behalf.
That moment where control passes from a person to an autonomous system is what WordLift’s CEO Andrea Volpini calls the delegation boundary.
The web spent three decades optimizing for one thing: convincing a human to click, trust, and buy. The agentic web requires something structurally different. It requires convincing a machine to verify, authorize, and act. Those are not the same problem, and most businesses are still solving the first one.
Why the Old Trust Signals Don’t Transfer
Humans are persuaded by tone, design, social proof, and narrative. None of that moves an AI agent. An agent does not have a gut feeling about your brand. It has a verification process, and if your brand cannot pass it, the agent does not act on your behalf it routes around you.
The tactics that built brand trust with humans for the last twenty years persuasive copy, polished design, social proof are largely invisible to the systems now making purchasing and recommendation decisions at scale.
What replaces them is a set of verifiable, machine-readable signals. Three are already reshaping how agents decide who to trust.
Signal One: Cryptographic Identity for Crawlers
Not all bots are equal.
Some represent legitimate agents acting on behalf of users. Others consume information without attribution or accountability. The financial institution example above illustrates exactly this problem: when AI traffic surges, you need to know which entities are accessing your information and what authority they carry.
The answer already exists in a protocol most businesses have never heard of. HTTP message signatures defined in RFC 9421 allow AI crawlers to cryptographically sign their requests. A publisher can now identify which AI systems are accessing their content, distinguish good-faith retrieval from unauthorized scraping for model training, and selectively grant or restrict access.
The infrastructure to know exactly which agents are reading your content already exists. The question is whether you are using it.
Signal Two: Mandates as Digital Permission Slips
If an agent is going to act on a customer’s behalf make a purchase, authorize a payment, commit to a booking something has to certify that the customer actually authorized it, and that the agent has the legitimate authority to execute it.
This is what Andrea refers to as a mandate: a tamper-proof, verifiable digital credential that certifies both intent and authority. Google’s emerging agent-to-payment protocol is one concrete implementation a structured way of saying, cryptographically, “this human authorized this agent to spend up to this amount on this category of purchase.”
But the principle extends far beyond commerce. Any interaction where an agent represents a user filling a form, accessing a service, submitting a request requires the receiving system to understand who the agent is and who it represents.
Mandates are the missing infrastructure piece between “an agent can technically make a purchase” and “a business can safely accept a purchase made by an agent.” Expect this layer to formalize quickly as agentic commerce moves from pilot to default.
Signal Three: Agents Now Look for Contradictions on Purpose
Perhaps the most counterintuitive shift: AI agents are increasingly designed to seek out contradicting evidence before trusting a source not just confirming facts.
This happens because models hallucinate, and recursive reasoninggathering multiple independent points of evidence before responding is the primary defense against it. An agent that finds only confirming, friction-free information about your brand should, in principle, be more suspicious, not less. Real, well-documented entities have some friction: a critical review, a comparison page, a third-party fact that complicates the marketing narrative.
A content strategy built entirely on confirmation is invisible or actively distrusted by a system designed to look for tension. This is a fundamental departure from decades of marketing instinct.
Ghost Citations: The Visibility Problem You Cannot See
Here is the part that most analytics dashboards will never show you.
The final answer an AI agent gives is only the visible output of a much larger process. Before responding, models increasingly gather multiple signals, evaluate evidence, and build context accessing and using your information during their reasoning without necessarily surfacing your brand in the final response.
Andrea calls these ghost citations: situations where AI systems use your content during their reasoning process, but the source does not appear in the final answer. Your information shaped the decision. Your brand received no credit.
This means AI visibility is not only about being mentioned by an AI system. It is about creating the signals and evidence that allow machines to correctly understand your brand, evaluate its relevance, and act with confidence even when your name never appears in the output.
The evidence layer is as important as the answer layer.
MCP and WebMCP: The Rails Being Built Right Now
Two technical developments are doing the structural work behind these trust signals.
MCP (Model Context Protocol), created by Anthropic, lets AI models interact with external data and applications through a standardized interface across different AI stacks. It is the connective tissue that lets an agent move from “answering a question” to “taking an action” inside your systems.
WebMCP, an initiative incubated by the W3C, takes this further for the web specifically. Instead of an agent reading your page’s DOM or taking a visual screenshot to figure out what your site does, WebMCP lets it interact through defined JavaScript functions a much more reliable, accessible way for agents to actually use a website rather than approximate it.
Together, these protocols are quietly becoming the rails that determine whether your website is something an agent can use, or something it has to awkwardly guess its way through.
From Content Strategy to Evidence Layer
The throughline across all these signals is the same: businesses need to stop thinking in terms of content and start thinking in terms of evidence.
Content answers “what do we want to say about ourselves.” An evidence layer answers “what can an agent verify about us, and how confidently.” Building that evidence layer means codifying internal knowledge through structured data, a knowledge graph, and an ontological core that represents what your business actually knows, claims, and can prove.
This requires probing how AI models currently perceive your brand versus how you want to be perceived, and deliberately closing that gap with verifiable, well-sourced information rather than more marketing copy.
Where WordLift Fits
WordLift builds the infrastructure businesses need to clear the delegation boundary: a structured Knowledge Graph that gives AI agents verifiable facts to check against, rather than narrative copy to take on faith. This is what allows an agent to confidently cite, recommend, or transact with your brand instead of routing around the uncertainty.
The Boundary Is Already Live
The delegation boundary is not a future state to prepare for. It is already where a growing share of purchasing, comparison, and recommendation decisions are happening quietly, without a human ever seeing your homepage.
The brands clearing that boundary today are not the loudest. They are the ones an agent can verify.