Web Bot Auth verifies a signing key. Robot access needs declared purpose, directory classification, local policy, and auditable edge enforcement.