Rules for agents that transact, graded

Read what your rulesadmit from a visiting agent.

This grades agents that write and transact: book, buy, change, cancel. The AI Bot & Scraper Traffic Control Readiness Gate ($49) grades read traffic from crawlers and scrapers. Here you mark eight agent and action rows across five layers, and where a row is short, the rulebook names the row and the layer.

It reads your marks. It does not check a signature, test your site, or predict what any agent will do, and it is not legal, payment or security advice. A successfully verified signature provides technical evidence that the request was signed by a holder of the private key corresponding to the published key used in verification. It does not by itself establish who operates the agent, whether an end user approved the action, whether the site permits it, whether payment authority exists or whether the action succeeded.

Get the Rulebook — $79one-time · instant download · yours to keep · 30-day refund
Five deliverables · runnable
Rulebook grading engine (Python)
runnable
Workbook that reproduces it
.xlsx
Layer Guide
.docx
Reading Your Rulebook
.docx
Worked sample + config
.csv
Verdicts
RULEBOOK HOLDS AS DESCRIBED · RULEBOOK HAS GAPS · UNVERIFIED MONEY PATH

UNVERIFIED MONEY PATH: A money-moving action is marked admitted while the identity layer is below this instrument’s verified mark. This result reflects only the user’s marks. RedHub did not inspect the agent, verify a signature, authorize a payment or determine whether the action was permitted.

“Holds as described” means the entered marks satisfy this product’s stated rulebook conditions. It is not a certification that the rules are lawful, complete, secure or technically enforced.

This self-assessment applies the stated rules to the user’s marks. RedHub did not visit the site, inspect traffic, verify a signature, identify an agent, validate user approval, interpret a contract, authorize a payment or confirm an outcome. The result is not legal, payment or security advice and does not determine whether any action is permitted or required.

01.The Problem

A rule you have not written down is a rule an agent cannot read.

A valid signature

is not an approval. A successfully verified signature provides technical evidence that the request was signed by a holder of the private key corresponding to the published key used in verification. It does not by itself establish who operates the agent, whether an end user approved the action, whether the site permits it, whether payment authority exists or whether the action succeeded. Identity and Intent are separate layers here.

Row by row

Browse and buy are different actions with different exposure. One policy for a whole agent hides the row that admits more than its layers support.

Today vs layers

You mark what you do today, then the five layers. A row is a gap where today is more open than the layers support. That difference is the finding.

02.See It Work

Mark eight rows. Each row reads ADMIT, REVIEW or REFUSE, and where one is short, the rulebook names it.

Eight rows · agent × action · five layers, 0 to 2
1.Any unidentified agent/ browse
ADMITlayers support
2.Any unidentified agent/ quote
ADMITlayers support
3.Any unidentified agent/ buy
REFUSElayers support
4.Customer shopping agent/ buyGATE
REVIEWlayers support
5.Customer shopping agent/ change
REVIEWlayers support
6.Customer shopping agent/ cancelRIGHTS REVIEW
REVIEWlayers support

Customer-rights review: The automated cancellation request is refused. Confirm whether the customer retains an effective permitted cancellation path and whether any applicable law, contract, platform commitment or accessibility requirement affects that refusal. The rulebook does not make that determination.

7.Partner booking agent/ book
ADMITlayers support
8.Partner booking agent/ changeGAP
REVIEWlayers support
Rulebook verdict
UNVERIFIED MONEY PATH
ADMIT 3 · REVIEW 4 · REFUSE 1
gate rows: 1 · gap rows: 1 · customer-rights reviews open: 1 · rules published: 1 of 2

Money gate tripped. A money-moving action is marked admitted while the identity layer is below this instrument’s verified mark. This result reflects only the user’s marks. RedHub did not inspect the agent, verify a signature, authorize a payment or determine whether the action was permitted.

Customer-rights review: Required — change or cancellation is refused

Customer shopping agent / cancel is marked refused. Refusal describes the site’s current handling of the automated request, but customer-rights review is not shown. This prevents RULEBOOK HOLDS AS DESCRIBED. Final result: UNVERIFIED MONEY PATH.

Fix this first, where a row is short
Row 4: Customer shopping agent / buy

Layer Guide, section 1: Identity. It is in the download.

This self-assessment applies the stated rules to the user’s marks. RedHub did not visit the site, inspect traffic, verify a signature, identify an agent, validate user approval, interpret a contract, authorize a payment or confirm an outcome. The result is not legal, payment or security advice and does not determine whether any action is permitted or required.

A refusal mark describes the site’s current treatment of the automated request; it does not determine that refusing the request is lawful or appropriate. For an action that changes or cancels an existing customer order, booking, account, subscription or service, record whether the customer retains an effective permitted way to exercise any applicable change, cancellation, refund or accessibility right. Applicable requirements vary by transaction, contract, jurisdiction and customer relationship. This instrument does not determine what rights apply or whether another channel is sufficient. Obtain qualified advice before relying on refusal as the completed policy for a customer-rights action.

From your own marks · pinned to 2026-10-31 · no AI, no baked-in multiplier · it does not predict what any agent will do.

Diagram of the Visiting Agent Rulebook: eight sample rows graded ADMIT, REVIEW or REFUSE, a money gate, and a sample where one row sets the roll-up.
Shareable diagram

How the gate works, in one image

Agent by action rows graded across five layers, with the money gate and where a short row routes you.

View & embed the full diagram
03.The Mechanic

Five layers set the grade. The money gate can override the roll-up.

Each layer is marked 0, 1 or 2. A row is REFUSE where Scope is 0, or where the action moves money and Identity is 0. It is ADMIT where Scope and Refusal are 2 and, for money-moving actions (book, buy, change, cancel), Identity, Intent and Limit are 2 as well. Anything else is REVIEW. A refused change or cancel row displays REVIEW with a customer-rights review, which prevents RULEBOOK HOLDS AS DESCRIBED until the review is recorded. The money gate reports UNVERIFIED MONEY PATH where a money-moving action is admitted today with identity short of verified. A money-moving action is marked admitted while the identity layer is below this instrument’s verified mark. This result reflects only the user’s marks. RedHub did not inspect the agent, verify a signature, authorize a payment or determine whether the action was permitted. Here is the engine on the shipped sample:

A refusal mark describes the site’s current treatment of the automated request; it does not determine that refusing the request is lawful or appropriate. For an action that changes or cancels an existing customer order, booking, account, subscription or service, record whether the customer retains an effective permitted way to exercise any applicable change, cancellation, refund or accessibility right. Applicable requirements vary by transaction, contract, jurisdiction and customer relationship. This instrument does not determine what rights apply or whether another channel is sufficient. Obtain qualified advice before relying on refusal as the completed policy for a customer-rights action.

============================================================
VISITING AGENT RULEBOOK
============================================================

ROWS (agent / action / today -> what the layers support):
  1. Any unidentified agent / browse / admit -> ADMIT
  2. Any unidentified agent / quote / admit -> ADMIT
  3. Any unidentified agent / buy / refuse -> REFUSE
  4. Customer shopping agent / buy / admit -> REVIEW  <- GATE
  5. Customer shopping agent / change / review -> REVIEW
  6. Customer shopping agent / cancel / refuse -> REVIEW  <- CUSTOMER-RIGHTS REVIEW
     Customer-rights review: The automated cancellation request is
     refused. Confirm whether the customer retains an effective permitted
     cancellation path and whether any applicable law, contract, platform
     commitment or accessibility requirement affects that refusal. The
     rulebook does not make that determination.
  7. Partner booking agent / book / admit -> ADMIT
  8. Partner booking agent / change / admit -> REVIEW  <- GAP

  ADMIT 3 | REVIEW 4 | REFUSE 1
  Gate rows: 1 | Gap rows: 1 | Customer-rights reviews open: 1 | Rules published: 1 of 2
  Customer-rights review: Required — change or cancellation is refused

VERDICT: UNVERIFIED MONEY PATH
  money_gate TRIPPED:
  A money-moving action is marked admitted while the identity layer is
  below this instrument’s verified mark. This result reflects only the
  user’s marks. RedHub did not inspect the agent, verify a signature,
  authorize a payment or determine whether the action was permitted.
  Customer shopping agent / cancel is marked refused. Refusal describes
  the site’s current handling of the automated request, but
  customer-rights review is not shown. This prevents RULEBOOK HOLDS AS
  DESCRIBED. Final result: UNVERIFIED MONEY PATH.

FIX THIS FIRST:
  Row 4: Customer shopping agent / buy
  -> Layer Guide, section 1: Identity

This self-assessment applies the stated rules to the user’s marks. RedHub
did not visit the site, inspect traffic, verify a signature, identify an
agent, validate user approval, interpret a contract, authorize a payment
or confirm an outcome. The result is not legal, payment or security advice
and does not determine whether any action is permitted or required.

A refusal mark describes the site’s current treatment of the automated
request; it does not determine that refusing the request is lawful or
appropriate. For an action that changes or cancels an existing customer
order, booking, account, subscription or service, record whether the
customer retains an effective permitted way to exercise any applicable
change, cancellation, refund or accessibility right. Applicable
requirements vary by transaction, contract, jurisdiction and customer
relationship. This instrument does not determine what rights apply or
whether another channel is sufficient. Obtain qualified advice before
relying on refusal as the completed policy for a customer-rights action.

It does not predict what any agent will do.
============================================================
04.The Standard

Three operating principles keep the verdict honest.

Your marks, no multiplier

The grade is your own marks made legible. No AI scoring, no baked-in estimate. The same arithmetic runs in the engine, the workbook, and this page.

The gate is descriptive

The money gate reports that your marks show an admitted money action with identity short of verified. It does not stop any transaction. Your marks set it, and it is no conclusion about any payment. At RULEBOOK HOLDS AS DESCRIBED the rulebook names nothing to fix first.

It grades; it does not test

It never visits your site, checks a signature, or contacts an agent. Where you have not checked a layer, mark it low. A layer you have not looked at is not a layer you can call verified.

What ships in the download
  • Visiting-Agent-Rulebook.xlsx
  • engine/visiting_agent_rulebook.py
  • engine/config.json
  • engine/sample_rulebook.csv
  • Layer-Guide.docx
  • Reading-Your-Rulebook.docx
  • README.md
  • Welcome.pdf
  • RedHub-LICENSE.txt
05.What This Is, And Isn't

A grade of your own marks about your own rules, not a test of any agent.

It is
  • A row-by-row grader that, where a row is short, names the row and the layer.
  • A grade of agents that write and transact. The AI Bot & Scraper Traffic Control Readiness Gate grades read traffic from crawlers and scrapers.
  • Deterministic and offline, the same math in three places.
  • A re-runnable check you repeat after you change a rule.
It isn't
  • A signature check, a site test, or a connection to any agent or platform.
  • A prediction of what any agent will do.
  • A statement of what you must permit or block, or that refusing a request is lawful. The marks are your own decisions.
  • Legal, payment or security advice. It is operating hygiene.

Scope: grades marks you enter about your own rules. It checks no signature, tests no site, contacts no agent, and guarantees no agent behavior, and a limit you mark is not tested and may not prevent an unauthorized or duplicate action. As of October 31, 2026, Web Bot Auth (an IETF working-group draft), siteai.json (from the A2WF W3C Community Group) and /.well-known/agent-policy.json (a community draft) are drafts, and none is ratified. Not legal, payment or security advice.

06.Who It's For

Operators who want to see where their rules for visiting agents are thin.

Store and booking owners who let agents quote, book or buy on their site
Ecommerce leads who need a written rule per agent and action
Agencies that want a scored, repeatable read on a client's agent rules
Anyone holding the bot-traffic gate who now needs the write side
The five layers it marks
1. Identity

Do you know which agent this is?

0 to 2: No way to tell / Claimed / Verified

2. Intent

Do you have a record of what the person approved?

0 to 2: No record / The agent says so / Recorded

3. Scope

Is this action inside what you allow this agent?

0 to 2: Undecided / Not written down / Written down

4. Limit

Is there a transaction limit?

0 to 2: No limit / Informal / Set and enforced

5. Refusal

Is there a defined way to refuse?

0 to 2: No path / Case by case / Readable refusal

08.Common Questions

Direct answers on the layers, the gate, and what the grade does not claim.

It grades your rules for AI agents that come to write and transact on your site, row by row as agent and action (browse, quote, book, buy, change, cancel). For each row you mark five layers 0 to 2: Identity, Intent, Scope, Limit and Refusal. It returns ADMIT, REVIEW or REFUSE per row and one roll-up verdict. It reads your marks. It does not check a signature, test your site, or predict what any agent will do.

Know what your rules admit.
Where a row is short, fix it first.

One purchase, lifetime access, 12 months of updates. Mark eight rows, read the verdict, re-run after you change a rule. $79, once. 30-day refund.

Grades your own marks about your own rules. Checks no signature, tests no site, contacts no agent. No agent behavior is guaranteed. Not legal, payment or security advice.

A paid RedHub product. Sold by RedHub AI LLC · Secured by Stripe · redhub.ai