# agents.txt — policy for autonomous AI agents
# Distinct from /.well-known/ai.txt (which covers crawlers + training):
# this file scopes what an AGENT acting on behalf of a user is allowed to
# do on this site. Mirror copy at /agents.txt.
#
# Site:    https://www.evergreenelksgolf.com
# Owner:   Evergreen Elks Lodge #2363
# Contact: contact@evergreenelksgolf.com
# Updated: 2026-05-03

User-Agent: *

# --- Allowed actions -------------------------------------------------------
# Read public pages, summarise content, link-out, and submit the contact
# form on a user's behalf using their own credentials/details.
Allow: /
Allow: /contact/
Allow: /api/contact           # POST allowed for legitimate user-initiated contact submissions
Allow: /api/subscribe         # POST allowed for legitimate user-initiated newsletter signup

# --- Disallowed actions ----------------------------------------------------
# Don't scrape the photo gallery for resale; don't bulk-submit forms;
# don't repeatedly probe the API endpoints.
Disallow: /api/contact?bulk
Disallow: /api/subscribe?bulk
Disallow-Bulk-Submit: yes
Rate-Limit: 1 form-submit per user per session

# --- Identification --------------------------------------------------------
# Agents must identify themselves with a non-spoofed User-Agent header
# that includes the operator's contact email or URL. Human-impersonation
# (bare browser UA strings) is not authorised.
Require-Identification: user-agent
Require-Contact-Header: X-Agent-Contact

# --- Form submission rules -------------------------------------------------
# Only submit the contact form when a real human has explicitly approved
# the message body. Agents must not auto-fabricate registrations,
# sponsorships, or donation pledges without explicit user confirmation.
Require-Human-In-Loop: contact-form, registration, sponsorship

# --- Canonical sources for agents -----------------------------------------
LLMs-Index: /llms.txt
LLMs-Full: /llms-full.txt
AI-Policy: /.well-known/ai.txt