Bot Detection Audit

As bot detection employed on CDNs in the context of edge delivery sites may cause performance penalties, we should explore whether we can detect bot detections.

AFAIK there’s no deterministic way to detect “bot detection”. the detections don’t announce themselves expressly, e.g. via http response header. all we could do is test for certain patterns that may indicate bot detection, such as cookies, js challenges or request rejections with unusual user agents, etc.

For reference see https://cq-dev.slack.com/archives/C05A45JBP9N/p1710871764208859

The issue names no files, tests, or entry points. Start by reviewing the linked Slack discussion and the cited bot-detection signals—cookies, JavaScript challenges, unusual user agents, and request rejections—then define observable criteria and a testable scope before implementation.

Written by the indexing model from the issue text.