This week in the search and SEO landscape, industry leaders—most notably from Google—have clarified the technical nuances governing how crawlers, AI agents, and search engines interact with your website. From the tactical necessity of HTTP 503 status codes during server maintenance to the complex evolution of how AI agents will eventually consume web content, these updates provide a roadmap for developers and SEO professionals alike.


1. Tactical Infrastructure: The Importance of 503s During PHP Maintenance

In a rapidly shifting digital environment, security is paramount. When PHP developers recently released emergency patches to address critical vulnerabilities, many websites were forced into sudden, brief periods of downtime. On October 21, Google Search Central issued a vital reminder: websites undergoing maintenance should serve an HTTP 503 "Service Unavailable" status code.

The Mechanism of Maintenance

The 503 status code is not merely a placeholder; it is a signal to search engines that the server is temporarily overloaded or down for maintenance. Google explicitly advises against using 404 (Not Found) or 200 (OK) codes for this purpose. A 404 tells the search engine that the page is permanently gone, which can lead to the URL being purged from the index. Conversely, a 200 code served during downtime provides a poor user experience and sends mixed signals to crawlers.

Implementation Best Practices

Google’s John Mueller clarified on Bluesky that the 503 does not necessarily need to be generated via PHP. Because the very purpose of the downtime is often to patch the PHP environment itself, the status code must be triggered by an external entity—such as a CDN routing rule, a load balancer, or a temporary server redirected via DNS.

Critical Considerations:

  • Time Sensitivity: Google’s crawl-rate documentation suggests that 503s should be served for no longer than 1–2 days. Prolonged 503 errors will eventually lead to the URL being dropped from the search index.
  • Robots.txt Pitfalls: According to Google’s guidelines on "pausing" a site, if a 503 is triggered in response to a request for robots.txt, the search engine will treat the entire site as blocked, effectively pausing all crawling activity.

2. Robots.txt: The Boundary Between Crawling and Training

The rise of AI has sparked intense debate over content ownership and usage rights. Gary Illyes of Google recently addressed the confusion surrounding the robots.txt protocol, emphasizing a distinction that many developers overlook: robots.txt controls crawling, not usage.

Defining the Protocol

In a Search Central video published on October 21, Illyes reaffirmed that robots.txt acts as an "access preference protocol." Per RFC 9309, these directives only dictate which pages a crawler is permitted to access. They do not, by default, govern what a company does with the data once it has been successfully crawled and ingested.

The Google-Extended Distinction

For site owners looking to manage how their content influences AI, Google provides the Google-Extended token. This is not a separate crawler, but rather a preference token that tells Google: "You may crawl this page for search purposes, but you may not use this data to train future Gemini models or for grounding in Gemini Apps." Because Google-Extended lacks its own user-agent string, it must be managed through these specific directives.

The Future of Content Usage

Illyes, who co-authored a draft for the Internet Engineering Task Force (IETF), is working to formalize a "Content-Usage" rule within robots.txt. While this would provide a standardized way to express training preferences, it remains a working group document and is not yet an industry-wide standard. Until that time, site owners must rely on company-specific tokens like Google-Extended and GPTBot to manage AI training exposure.


3. The OpenAI-Cloudflare Pilot: Expanding the Agentic Horizon

OpenAI and Cloudflare recently announced a research pilot that has significantly expanded the reach of ChatGPT’s search capabilities. By leveraging signals from approximately 1% of the Cloudflare network, OpenAI has discovered and indexed hundreds of millions of previously unmapped web pages.

Data-Driven Discovery

The pilot focuses on identifying non-existent pages, updated content, and new link structures. While this allows ChatGPT Search to draw on a wider repository of information, both companies have been careful to note that these signals are strictly for discovery. "A signal about a page doesn’t grant permission to access it," the joint blog post clarified.

Implications for Publishers

The search ecosystem is bifurcating. OpenAI’s crawler documentation separates search from training. Publishers can now use Allow for OAI-SearchBot while using Disallow for GPTBot to permit their content to appear in search results without contributing to model training. However, the discovery of a page via this pilot does not guarantee traffic or citations; OpenAI’s internal ranking algorithms remain the ultimate arbiter of visibility.


4. Technical Nuances: The Case of Bracketed URLs

In a revelation that caught many SEO professionals off-guard, John Mueller confirmed that raw square brackets ([ and ]) and their percent-encoded counterparts (%5B and %5D) are treated as distinct URLs by Google.

The "Pick One" Strategy

Mueller admitted that he had previously suggested these were equivalent, but technical analysis confirms they are unique identifiers. If a site returns identical content for both, Google will crawl both versions, identify them as duplicates, and eventually select a canonical version.

To mitigate this, Mueller suggests a "pick one" strategy:

  1. Consistency: Use one format across all links, canonical tags, sitemaps, and structured data.
  2. RFC Compliance: Adhere to RFC 3986, which dictates that reserved characters should be percent-encoded.
  3. Legacy Sites: For sites already utilizing raw brackets, there is no immediate need for a site-wide overhaul, as Google will eventually figure out the mapping. However, for any new site architecture, encoded brackets are the industry standard.

5. The State of Image Formats: JPEG XL Limitations

Despite the rollout of JPEG XL support in major browsers like Chrome 155 and Firefox 158, the format is currently unsupported by Google Images and Google Discover previews.

SEO for Images

Google’s official documentation remains committed to legacy formats such as JPEG, PNG, WebP, and AVIF. If a site serves an image in JPEG XL, it will not appear in image search results or Discover feeds.

The Workaround:
Web developers are encouraged to use the <picture> element. By placing a JPEG XL source inside the tag, developers can serve high-quality, efficient images to supported browsers, while providing a fallback—such as a standard JPEG or WebP—within the <img> element. Google Search reads the <img> tag, ensuring that the fallback image remains indexable and visible in search results.


6. The Future Vision: Sundar Pichai on AI Agents

Google CEO Sundar Pichai’s recent appearance on the Sources podcast highlighted a critical shift in the internet’s architecture. Pichai expects AI agents to operate in a dual-mode future:

  1. Browsing: Agents will navigate the web much like human users, clicking through pages and interacting with UI elements.
  2. Protocols: Future agents will use specialized protocols, such as the Universal Commerce Protocol, to perform tasks—like purchasing products or booking services—directly through structured machine-to-machine communication.

The Agentic Layer

Pichai views this as a "more scalable approach" to the web, though he concedes that protocol-based navigation is still in its infancy. In the interim, Google’s "user-triggered fetchers" (such as Google-Agent) will continue to traverse the web, often operating outside the standard constraints of robots.txt. This signals that the line between "search" and "agentic action" is blurring, and web developers should prepare for a future where content is designed not just for human eyes or search spiders, but for functional AI agents.


Summary: A Theme of Signals and Boundaries

This week’s developments illustrate a common theme: the precision of digital signals.

Whether it is the 503 signal for server maintenance, the robots.txt signal for crawler access, or the token-based signal for AI training, the efficacy of a website depends on how clearly it communicates with these automated systems. As we move toward a more "agentic" web, the responsibility falls on site owners to master these protocols. By aligning with Google’s evolving documentation and understanding the technical requirements of new AI-driven tools, web professionals can ensure their content remains both visible and protected in an increasingly complex digital ecosystem.