OAI-SearchBot and GPTBot began rendering JavaScript on September 25, 2026, according to IP-verified logs from a Japanese Next.js marketplace. OpenAI has not announced it, so the case rests on prefetch URLs that only a JavaScript run can produce.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+15
- Incentives30
- Confidence40
Cloudflare says AI-agent requests on its network grew more than 1,700% in a year as non-human traffic passed half the total. It now wants sites to identify and price agents as customers, after advising last year that new domains block AI training crawlers.
Reality
- Evidence35
- Adoption50
- Hype gap+25
- Incentives85
- Confidence40
Fewer than 1% of Cloudflare sites block search crawlers while 17% block training. A single mixed-use crawler used to collapse those two into one decision, and the new setting splits it for three named operators.
Reality
- Evidence55
- Adoption35
- Hype gap+20
- Incentives70
- Confidence60
A dev.to guide walks Laravel apps from HTTP/1.1 to HTTP/3 on nginx, and the part worth reading twice is its admission that the middle step can hurt, because one connection carrying 40 streams stalls on one lost packet.
Reality
- Evidence62
- Adoption75
- Hype gap+5
- Incentives50
- Confidence66
Cloudflare's Disallow AI Training control lets Googlebot and Applebot keep indexing a site while a directive Cloudflare writes into robots.txt tells them not to train on it. Bingbot is expected to honor it in early 2027.
Reality
- Evidence30
- Adoption25
- Hype gap+25
- Incentives70
- Confidence35
Black Lotus Labs assesses the botnet as Chinese state work under Flax Typhoon, assembled from SOHO routers, NVRs, NAS boxes and IP cameras whose 17-day average lifespan makes the infrastructure disposable by design.
Publishers:lumen.com
Reality
- Evidence58
- Adoption62
- Hype gap+15
- Incentives68
- Confidence57
CHEQ and Cloudflare both published their detection methods this year. Read next to the anti-detect vendor blogs, they show that a buyer outside the vendor can falsify about two things and has to take the rest on trust.
Reality
- Evidence47
- Adoption38
- Hype gap+8
- Incentives74
- Confidence52
The bot submission form moves into Application Security and grows a history tab, which means the entry describing your crawler becomes a record you are expected to keep matching your traffic rather than a form you filed once.
Reality
- Evidence47
- Adoption20
- Hype gap+12
- Incentives72
- Confidence56
Bot Preference Sync writes Cloudflare's AI bot settings into your robots.txt from the Free tier up. The file becomes a rendering of dashboard state, and Cloudflare's bot database decides what it says.
Reality
- Evidence55
- Adoption22
- Hype gap+12
- Incentives78
- Confidence58
Cloudflare says its RFC 9234 tracking found two large Tier-1 networks removing the Only to Customer attribute from routes they forward, blanking the leak signal for everyone behind them.
Reality
- Evidence55
- Adoption25
- Hype gap+12
- Incentives55
- Confidence50