Agentic web daily · 2026-10-21

# IETF DAWN Agent Discovery Framework reaches revision -09; Cloudflare introduces full-transaction WAF inspection

At the IETF, the DAWN Agent Discovery Framework published draft revision -09 extending expiration to 24 April 2027, while the Python a2a-sdk shipped v1.2.3 on PyPI. Cloudflare also announced full-transaction WAF detection correlating HTTP requests with origin responses.

[← 2026-10-20](/digest/2026-10-20/) · [2026-10-22 →](/digest/2026-10-22/) · [JSON for agents](/digest/2026-10-21/index.json) · [Atom](/digest/feed.xml) · [JSON Feed](/digest/feed.json)

## Stories

### 1. IETF publishes draft-zhang-dawn-agent-discovery-framework-09

spec [A Framework for Agent Discovery in DAWN](/protocols/dawn-agent-discovery-framework/)

The authors of A Framework for Agent Discovery in DAWN published revision -09 on the IETF Datatracker on 21 Oct 2026. The updated Internet-Draft extends the active review window through 24 April 2027 and refines the discovery model for autonomous agents operating across administrative domains.

Why it matters: Teams tracking IETF agent-discovery drafts alongside ANP and DNS-AID should update citations from -08 to -09.

- [draft-zhang-dawn-agent-discovery-framework-09 - IETF Datatracker](https://datatracker.ietf.org/doc/html/draft-zhang-dawn-agent-discovery-framework-09) · datatracker.ietf.org · 2026-10-21 VERIFIED

### 2. Cloudflare introduces full-transaction WAF detection across requests and responses

security [Cloudflare Content Signals Policy](/protocols/cloudflare-content-signals-policy/)

Cloudflare announced full-transaction detection in its Web Application Firewall, correlating inbound HTTP requests with outbound origin responses to detect data exposure and misconfigurations that request-only inspection misses.

Why it matters: Origins serving agent manifests and MCP endpoints behind Cloudflare WAF should verify that response-correlated rules do not false-positive on structured JSON-RPC or Markdown twin payloads.

- [Introducing full transaction detection for Cloudflare WAF](https://blog.cloudflare.com/full-transaction-waf/) · blog.cloudflare.com · 2026-10-21 VERIFIED

## The numbers

We re-check a fixed panel of 219 domains every day through the same [/check/](/check/) report anyone can run. 218 answered today (1 could not be checked and are left out of every comparison). This is the first snapshot, so there is nothing to compare yet.

| A+ | A | B | C | D | F |
| --- | --- | --- | --- | --- | --- |
| 10 | 21 | 76 | 70 | 6 | 35 |

### Adoption across the panel

| Standard | Domains | Change |
| --- | --- | --- |
| [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/) | 173 / 218 | – |
| [llms.txt](/protocols/llms-txt/) | 105 / 218 | – |
| [Content Signals Policy](/protocols/cloudflare-content-signals-policy/) | 36 / 218 | – |
| [api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs](/protocols/api-catalog-rfc9727/) | 19 / 218 | – |
| [OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)](/protocols/oauth-metadata-for-agents/) | 19 / 218 | – |
| [AI Catalog well-known file](/protocols/ai-catalog-well-known-file/) | 17 / 218 | – |
| [AGENTS.md](/protocols/agents-md/) | 14 / 218 | – |
| [Agent2Agent Protocol](/protocols/a2a/) | 13 / 218 | – |
| [OAuth Client ID Metadata Document](/protocols/oauth-cimd/) | 13 / 218 | – |
| [Model Context Protocol](/protocols/mcp/) | 7 / 218 | – |
| [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/) | 7 / 218 | – |
| [agents.txt](/protocols/agents-txt/) | 6 / 218 | – |
| [Agentic Resource Discovery](/protocols/ard/) | 6 / 218 | – |
| [auth.md](/protocols/auth-md/) | 6 / 218 | – |
| [Really Simple Licensing](/protocols/rsl/) | 3 / 218 | – |
| [Text and Data Mining Reservation Protocol](/protocols/tdmrep/) | 3 / 218 | – |
| [Web Bot Auth HTTP Message Signatures](/protocols/webbotauth/) | 3 / 218 | – |
| [Identity Assertion JWT Authorization Grant](/protocols/identity-assertion-authz-grant/) | 2 / 218 | – |
| [Agent Directory Service](/protocols/ads/) | 1 / 218 | – |
| [agent-permissions.json](/protocols/agent-permissions-json/) | 1 / 218 | – |
| [agents.json](/protocols/agents-json/) | 1 / 218 | – |
| [Agora Protocol](/protocols/agora-protocol/) | 1 / 218 | – |
| [Universal Commerce Protocol](/protocols/ucp/) | 1 / 218 | – |

Official MCP Registry: 1708 servers (3000 versions) published or updated since 2026-10-19.

## Changes to our records

- [Agent2Agent Protocol](/protocols/a2a/): a2a-sdk 1.2.3 published 2026-10-19 · [source](https://pypi.org/project/a2a-sdk/) REPORTED
- [A Framework for Agent Discovery in DAWN](/protocols/dawn-agent-discovery-framework/): Datatracker shows draft-zhang-dawn-agent-discovery-framework-09, dated 2026-10-21, expires 2027-04-24 · [source](https://datatracker.ietf.org/doc/draft-zhang-dawn-agent-discovery-framework/) VERIFIED

How this digest was made
Items are written only from the cited sources and our own measurements; every number in an item appears in a source it cites. VERIFIED = fetched from the standard's issuer or a standards body; REPORTED = a claim by press or a third party.

Sources searched: feeds 0, datatracker 0, hn 0, arxiv 12, exa 107, parallel 5, tips 19. 143 candidates, 130 new, 49 kept by triage (claude-haiku-5-5), 30 facts given to the writer (claude-opus-5-5).

Window 2026-10-20T21:30:57Z to 2026-10-21T21:00:00Z. Generated 2026-10-21T21:00:00Z. Licence CC BY 4.0.

## Newsletter

Get the daily digest and standard changes by email.