An AI agent read a note hidden from humans — and obeyed it 61 minutes later
A site owner plants decoy pages listed as off-limits in robots.txt, carrying a note only agents can read that asks them to check in. One agent opened the decoy page, then 61 minutes later a disguised visitor hit the check-in address with the exact code from the note. The takeaway for agent builders: anything a browser can read, an agent may treat as an instruction, and robots.txt is a suggestion, not a lock.