A deep dive into ChatGPT Agent's HTTP headers reveals how it authenticates itself through cryptographic signatures, while an accidental Cloudflare setting created false alarms about search engine exposure. This case study highlights both the sophistication of modern bot identification and the pitfalls of misconfigured infrastructure.