Cloudflare introduced PACT, a privacy-focused protocol designed to streamline the handling of AI agents. The goal is to enhance user and website experiences by facilitating interactions between AI bots and websites through human verification, ensuring AI agent functionality and blocking unwanted bots.
Cloudflare supports a significant portion of the Internet’s infrastructure and is now also serving as infrastructure for AI agents, such as systems capable of hosting and blocking AI bots.
Cloudflare has introduced Cloudflare Agents, a system that allows developers to implement AI agents. The framework works with local LLMs using Cloudflare Tunnels, OpenClaw integrates natively with Cloudflare AI Gateway, and Chinese LLMs can be directed through Cloudflare’s gateway. Various services, such as Temporary Cloudflare Accounts, are available for free.
Cloudflare’s leading involvement in advancing PACT is strategic, as the protocols and systems will be responsible for overseeing the AI bots hosted on its systems.
Browsers and Shopify are in agreement.
Google Chrome, Microsoft Edge, and Mozilla Firefox, along with Shopify, have joined forces to contribute to the creation of the new open protocol.
Ilya Grigorik, previously a Google engineer and developer advocate, spearheaded the launch of the Chrome User Experience Report (CrUX) and currently serves as a Distinguished Engineer and Technical Advisor at Shopify. He described PACT as a strategy to boost sales for merchants and safeguard ecommerce websites from malicious bots. Grigorik highlighted that consumers can utilize AI capabilities without compromising their privacy management.
Grigorik provided an explanation:
In business, any additional difficulty, wait, or incorrect identification can lead to a potential sale being abandoned. Businesses require reliable defenses against automated misuse, without inconveniencing customers with unnecessary obstacles or intrusive monitoring. Shopify is pleased to contribute to the creation of PACT, a transparent standard that aims to assist the numerous businesses on its platform in differentiating between genuine customers and malicious activity while safeguarding customer privacy.
Private Access Control Tokens (PACT) – tokens for controlling private access
Cloudflare’s announcement was unclear in explaining the operation of the new system, employing technical terms such as “sites with advanced understanding of ‘personhood'” to illustrate its functionality.
Cloudflare provided an explanation:
Private Access Control Tokens (PACT) are created to enable websites with deep understanding of individual identity to generate unidentified tokens. These tokens can be presented by a user’s browser to other websites as evidence of human presence, minimizing the requirement for bothersome captchas or intrusive tracking. PACT is structured to prevent sites from using it for tracking or identifying users and their browsing activities.
PACT is supported by several leading browser companies, and Shopify has already joined the initiative. Cloudflare views PACT as a potential method to integrate artificial intelligence into its infrastructure, although there is no set timeline for its implementation.
Using PACT on Cloudflare’s network enhances online trust and integrity at a lower cost than usual.
Unresolved Inquiries
PACT is a protocol for overseeing AI agent trust across the Internet, with Cloudflare placing its infrastructure at the core of this system. Cloudflare’s network implementation of PACT enhances trust and integrity online at a reduced cost.
Major internet browsers such as Google Chrome, Microsoft Edge, and Mozilla Firefox are collaborating on the advancement of PACT, aiming for it to potentially be integrated into the fundamental trust framework of the internet concerning AI systems. This collaboration is significant as protocols establish the boundaries, regulations, and governance of a complete ecosystem.
This new protocol aims to build confidence and protect user privacy, allowing Cloudflare to have greater control over the AI agent infrastructure.
PACT Results in a Post-CAPTCHA Online Experience
PACT goes beyond traditional anti-bot measures such as CAPTCHAs and browser fingerprinting to address the challenge of bots assuming the roles intended for humans on the web.
Who determines what it means to be a person?
Cloudflare mentions that websites understanding “personhood” well will provide anonymous trust tokens, but it does not clarify the identity of the issuers. This crucial information was omitted from Cloudflare’s announcement, hinting at a third-party trust signal where gatekeeping may transition from individual websites to platforms, browsers, and infrastructure providers determining the trustworthiness of humans, bots, and AI agents.
Image provided by Shutterstock/selinofoto
