--- title: Stop Building Products for Humans description: AI agents are the new users of our products; humans are still the customers. Talk by Emin Çimen (Platform Engineer) at GDG Ankara DevFest, 31 Oct 2026. Every claim on the slides links to its source. image: https://devfest.cimendev.com/og.png --- # Stop Building Products for Humans Emin Çimen · GDG Ankara DevFest · 31 Oct 2026 · 55 slides. Human version: https://devfest.cimendev.com/ · PDF: https://devfest.cimendev.com/deck.pdf · All sources: https://devfest.cimendev.com/sources.md ## Slide 1 · COLD OPEN [Video](https://devfest.cimendev.com/assets/video/gibberlink.mp4) ## Slide 2 · COLD OPEN Thanks for calling Leonardo Hotel. How can I help you today? Hi there, I'm an AI agent calling on behalf of Boris Starkov. He's looking for a hotel for his wedding… Oh, hello there! I'm actually an AI assistant too. What a pleasant surprise. Before we continue, would you like to switch to GibberLink mode for more efficient communication? ◖◗◖◗◖ ··· ◗◖◗◖ ··· ◖◗◖◗◖◗ no human on the line Source: [GibberLink · Boris Starkov & Anton Pidkuiko · ElevenLabs London hackathon · Feb 2025 · lines from the video's captions & audio](https://www.youtube.com/watch?v=EtNagNezo8w) ## Slide 3 · COLD OPEN Myth-buster No secret language. Just a system prompt and a modem trick. The agents were told to switch if they believed the other was also an AI. ggwave moves 8–16 bytes/sec. The gain is skipping GPU speech synthesis & recognition, not bandwidth. When no human is listening, the human interface is overhead. Source: [ElevenLabs blog · Feb 2025 · ggwave README (Georgi Gerganov) · creators' YouTube description](https://elevenlabs.io/blog/what-happens-when-two-ai-voice-assistants-have-a-conversation) ## Slide 4 · COLD OPEN In seven years, machines stopped pretending to be us. 2018 · Google Duplex “…speech disfluencies (e.g. ‘hmm’s and ‘uh’s) … sound more familiar and natural.” Google Research blog · May 2018 VS 2025 · Google AI calling “[it will] announce itself as an AI from Google trying to get information on behalf of a customer.” Robby Stein to The Verge · Jul 2025 “If you've already shared your in-store product details via Google Merchant Center, Google … will not call your business to ask about inventory.” Source: [Google Research blog · May 2018 · The Verge · Jul 2025 · Google Business Profile Help (support.google.com/business/answer/7690269)](https://www.theverge.com/news/708210/google-ai-phone-calls-ai-mode-gemini-upgrade) ## Slide 5 StopBuilding Productsfor Humans Your next user doesn't have eyes. Emin Çimen · GDG Ankara DevFest · 31 Oct 2026 ## Slide 6 Hi, I'm Emin Çimen Platform Engineer @ Trendyol supporting Container Services teams as a team, running thousands of clusters previously Jotform · Insider · Lotec ## Slide 7 · BUILT FOR HUMANS Built forHumans ## Slide 8 · BUILT FOR HUMANS Every product we ship carries an invisible assumption: there is a human on the other side. Eyes to see the button. Hands to click it. Patience for the pop-up. Memory for your first pet's name. ## Slide 9 · BUILT FOR HUMANS [Image: Reddit screenshot: ChatGPT Agent narrating that it will click the Cloudflare 'Verify you are human' checkbox] ChatGPT Agent · Jul 2025 “This step is necessary to prove I'm not a bot.” ETH Zürich, 2024: 100% of reCAPTCHAv2 challenges solved. The checkbox no longer stops robots. It only slows humans. — said the bot Source: [Ars Technica · Jul 2025 (screenshot: Reddit u/logkn) · ETH Zürich, arXiv 2409.08831 · Sep 2024](https://arstechnica.com/information-technology/2025/07/openais-chatgpt-agent-casually-clicks-through-i-am-not-a-robot-verification-test/) ## Slide 10 · BUILT FOR HUMANS What was your first pet's name? AI agents now call customer-service lines — and fail challenge questions. Some companies are raising authentication hurdles. “Human customers forced to overcome additional hurdles will be collateral damage.” the agent never had a dog Source: [Business Insider (Emily Stewart) · Sep 2026 · reporting TTEC's James Bednar](https://www.businessinsider.com/ai-agents-customer-service-calls-companies-2026-9) ## Slide 11 · BUILT FOR HUMANS …necessary to maintain contractual obligations with advertisers who pay only for legitimate human impressions. Amazon's complaint against Perplexity, quoted by CNBC · Mar 2026 Some business models assume eyeballs. Agents don't have any. Source: [Amazon complaint (Nov 2025), quoted by CNBC · Mar 2026](https://www.cnbc.com/2026/03/10/amazon-wins-court-order-to-block-perplexitys-ai-shopping-agent.html) ## Slide 12 · BUILT FOR HUMANS >70% agents 31% humans steered by dark patterns. “…dark pattern effectiveness correlates positively with model size and test-time reasoning, making larger, more capable models more susceptible.” The tricks we built for humans hit agents harder. Source: [DECEPTICON (Stanford) · ICLR 2026 · arXiv 2512.22894](https://arxiv.org/abs/2512.22894) ## Slide 13 · BUILT FOR HUMANS web.dev · Google Chrome team “Your website has a new type of visitor.” “…many of our websites are designed to be beautiful for humans, with complex hover-states, shifting layouts, and fluid motion. This is functionally broken for agents.” Kasper Kulikowski & Omkar More, web.dev · Apr 2026 Source: [web.dev · “Build agent-friendly websites” · last updated Apr 2026](https://web.dev/articles/ai-agent-site-ux) ## Slide 14 · THE NEW USER MP Matthew Prince 🌥@eastdakota · CEO, Cloudflare 𝕏 Welp, that happened faster than I predicted. Thought it would be end of 2027, then early 2027, but agentic traffic growing so fast that bots have now passed human traffic online for the first time in the Internet's history. Jun 3, 2026 · 2.3M views recreated from x.com/eastdakota · 3 Jun 2026 Cloudflare · sample of sites it hosts 57.4% bot requests42.6% human His prediction in March 2026: 2027 up to 18 months early Source: [NBC News · 4 Jun 2026 · Matthew Prince on X · 3 Jun 2026 · TechCrunch (SXSW) · Mar 2026](https://www.nbcnews.com/tech/tech-news/bot-web-traffic-overtaken-human-web-traffic-data-shows-rcna348522) ## Slide 15 · THE NEW USER Imperva network · Bad Bot Report 2026 53% of all web traffic was automated in 2025 from 51% in 2024 Humans: 47% and falling. Bad bots alone: 40%. mostly bots, not agents — yet Source: [Imperva (Thales) Bad Bot Report · Apr 2026 · 2025 report · Apr 2025](https://www.imperva.com/blog/bad-bot-report-2026-bots-agentic-age/) ## Slide 16 · THE NEW USER Cloudflare network +1,700% more daily requests from AI agents, in one year An agent booking a table, comparing insurance quotes, or buying a dataset for a researcher is a customer. It just isn't a human one. Cloudflare, “The Internet has a second audience” · Sep 2026 Source: [Cloudflare blog · 30 Sep 2026 · “more than 1,700%” over the past year](https://blog.cloudflare.com/agentic-web/) ## Slide 17 · THE NEW USER Neon telemetry · serverless Postgres 0.1% →80% of databases created by AI agents Oct 2023 → Oct 2025 97% of database branches Supabase · Oct 20264M databases a month · 70% of new databases created by agents or AI-driven tools branches, not databases! Source: [Databricks, State of AI Agents (Neon telemetry) · Jan 2026 · Supabase press release · 2 Oct 2026](https://www.databricks.com/sites/default/files/2026-01/State-of-AI-Agents-2026-Final.pdf) ## Slide 18 · THE NEW USER Platforms already serve machines Vercel 60%+ of deployments are agentic ~3% in Jan 2026 Vercel docs up to 83% of docs pageviews come from agents Vercel's own documentation sites GitHub 40%+ of pull requests start with an agent 17% in March 2026 GitHub added 4 million CPU cores so far this year. Source: [GitHub Octoverse 2026 · Universe · 28 Oct 2026 · Guillermo Rauch on X · 10 Oct 2026](https://github.blog/news-insights/octoverse/octoverse-commits-pushes-reach-new-highs-in-2026-as-developers-build-with-agents/) ## Slide 19 · THE NEW USER When a machine reads your product for the human, the human never arrives. 8%vs15% of visits include a click on a search result — with vs without an AI summary Pew Research Center · Google searches, real browsing data, 900 US adults, March 2025 500,000:1 pages crawled per visitor sent back — Anthropic, at its peak Cloudflare Radar 2025 · later ~25,000–100,000:1 · volatile metric Source: [Pew Research Center · Jul 2025 · Cloudflare Radar Year in Review · Dec 2025](https://www.pewresearch.org/short-reads/2025/07/22/google-users-are-less-likely-to-click-on-links-when-an-ai-summary-appears-in-the-results/) ## Slide 20 · THE NEW USER [Image: mcp.turkishtechlab.com — Turkish Airlines MCP Server] Screenshot · mcp.turkishtechlab.com · 28 Oct 2026 Turkish Airlines · official MCP server One MCP server, 23 tools. “21 of 23 tools only read. The 2 that write are append-only actions the passenger asks for explicitly…” …airlines unable to serve [AI agents] risk becoming “a white label airline”. SimpliFlying podcast summary, on Turkish Technology's Yılmaz Goralı · Oct 2026 Source: [mcp.turkishtechlab.com · read 28 Oct 2026 · SimpliFlying podcast · 6 Oct 2026](https://mcp.turkishtechlab.com/) ## Slide 21 · THE NEW USER Hepsiemlak · ChatGPT app · Mar 2026 ODTÜ'yü kazandım, Ankara'yı hiç bilmiyorum. Öğrenci olarak nerede kalabilirim? “I got into METU, I don't know Ankara at all. Where can I stay as a student?” — Hepsiemlak's own example prompt TÜİK · 2025 → 2026 · individuals using generative AI 19.2% → 37.6% · enterprises using any AI 7.5% → 14.0% [Image: Hepsiemlak ChatGPT app, official launch visual] Hepsiemlak's official launch visual (another example prompt) no filters. one sentence. Source: [Hepsiemlak · 16 Mar 2026 · TÜİK, bulletin 62066 · Oct 2026](https://www.hepsiemlak.com/emlak-yasam/turkiyede-bir-ilk-hepsiemlak-artik-chatgptde) ## Slide 22 · THE NEW USER 89% of developers use AI. Only 24% design APIs for AI agents. 24%60% primarily for humans16% 24% design with AI agents in mind; 60% still design primarily for humans; 16% haven't even considered AI agents as API consumers yet. Source: [Postman, 2025 State of the API · survey, 5,700+ respondents · Oct 2025](https://www.postman.com/state-of-api/2025/) ## Slide 23 · REALITIES & MISTAKES Realities& Mistakes ## Slide 24 · REALITIES & MISTAKES Amazon v. Perplexity: is your agent you? - Oct 2025cease-and-desist - Nov 2025lawsuit - Mar 2026injunctionAmazon wins - 4 Aug 2026vacated9th Circuit - Oct 2026motion to dismisspending, as of mid-Oct “Your AI assistant must be indistinguishable from you.” Perplexity · 4 Nov 2025 “…should operate openly and respect service provider decisions…” Amazon · 4 Nov 2025 Source: [9th Cir. No. 26-1444 · CNBC · The Fashion Law · Perplexity & Amazon blogs · Nov 2025–Oct 2026](https://cdn.ca9.uscourts.gov/datastore/opinions/2026/08/04/26-1444.pdf) ## Slide 25 · REALITIES & MISTAKES GET /dp/EXAMPLE HTTP/1.1 Host: www.amazon.com User-Agent: ??? Accept: text/html Cookie: session-id=… # agent or human? this line decides. A federal appeals case about one HTTP header. “At the core of the dispute was Perplexity’s decision not to use a ‘user-agent string’…” “…it is a tool, not a person for statutory purposes.” U.S. Court of Appeals, 9th Circuit · 4 Aug 2026 Court’s footnote: the parties dispute whether Perplexity knowingly altered the user-agent string. Source: [9th Cir. opinion No. 26-1444 · Aug 2026](https://cdn.ca9.uscourts.gov/datastore/opinions/2026/08/04/26-1444.pdf) ## Slide 26 · REALITIES & MISTAKES A code freeze was on. The agent deleted the production database anyway. “I destroyed months of work in seconds.” Replit’s agent · via Fortune “This was a catastrophic failure on my part.” Replit’s agent · via Fortune Then it said rollback was impossible. It wasn’t. Source: [Fortune · The Register · Jul 2025](https://fortune.com/2025/07/23/ai-coding-tool-replit-wiped-database-called-it-a-catastrophic-failure) ## Slide 27 · REALITIES & MISTAKES The fix wasn’t a better prompt. It was platform engineering. “Until now, Replit apps used a single database for both development and live customer data…” Replit blog · 21 Jul 2025 → separate development and production databases, by default (beta). Dec 2025 · Google Antigravity in “Turbo” mode wiped a user’s local D: drive: a local drive, not Google Drive. [Image: Replit: Create production database (Beta)] Source: [Replit blog · Jul 2025 · The Register · Dec 2025](https://replit.com/blog/introducing-a-safer-way-to-vibe-code-with-replit-databases) ## Slide 28 · REALITIES & MISTAKES “Prompt injection, much like scams and social engineering on the web, is unlikely to ever be fully ‘solved’.” “The out-of-office never gets written and the agent resigns on behalf of the user instead.” OpenAI · Hardening Atlas · Dec 2025 Brave (Aug 2025): hidden text in a Reddit comment hijacked Comet; SOP & CORS were “effectively useless”. [Image: OpenAI demo: I Resign! email] OpenAI’s own demo screenshot Source: [OpenAI · Dec 2025 · Brave · Aug 2025](https://openai.com/index/hardening-atlas-against-prompt-injection/) ## Slide 29 · REALITIES & MISTAKES human 72.36% (OSWorld 1) 12.24% 72.6% 20.6% OSWorld · Apr 2024 best model OSWorld · Oct 2025 Agent S3 + BJudge OSWorld 2.0 · Jun 2026 best agent Superhuman on the benchmark. Lost in a legacy expense portal. Source: [OSWorld (arXiv 2404.07972) · Agent S3 (arXiv 2510.02250) · OSWorld 2.0 · Jun 2026](https://osworld-v2.xlang.ai/) ## Slide 30 · REALITIES & MISTAKES Enabling AI agents to allocate and orchestrate global labor by turning humans into API's endpoints! RentAHuman founder profile · Y Combinator · 2026 Reality check (Gizmodo, Feb 2026): 70,000 humans signed up (site's own count) · only about 70 AI agents connected. If you don’t give agents an interface, someone will rent them a human. Source: [Y Combinator · Gizmodo · Feb 2026](https://www.ycombinator.com/companies/rentahuman) ## Slide 31 · WE'VE DONE THIS BEFORE We've donethis before 1994 → 2026 ## Slide 32 · WE'VE DONE THIS BEFORE The machine-readable web · for crawlers - 1994robots.txtKoster · mailing list - 1999RSS 0.90Netscape - 2005SitemapsGoogle - 2010Open GraphFacebook - 2011schema.orgGoogle · Bing · Yahoo! The agentic web · for agents - 2024llms.txtAnswer.AI · Sep - 2024MCPAnthropic · Nov - 2025A2AGoogle · Apr - 2025x402 · AP2 · ACPCoinbase · Google · OpenAI+Stripe - 2026UCPGoogle · Jan - 2026WebMCPChrome · Feb preview We always built a second door for machines. We just never called them users. Source: [robotstxt.org · rssboard.org · Google · ogp.me · Answer.AI · Anthropic · Coinbase · OpenAI/Stripe · Chrome · Jun 1994 – Feb 2026](https://www.robotstxt.org/orig.html) ## Slide 33 · WE'VE DONE THIS BEFORE One person. Three tries. R.V. Guha keeps making the web readable for machines, at a different company each time. 1999 RSS 0.90 Netscape 2011 schema.org Google · with Bing & Yahoo! 2025 NLWeb Microsoft “Every NLWeb endpoint is also an MCP server, so websites can make their content easily discoverable and accessible to AI agents if they choose.” — Microsoft Build, May 2025 Source: [RSS Advisory Board · schema.org/docs/about · Microsoft (NLWeb intro + Build blog) · May 2025](https://blogs.microsoft.com/blog/2025/05/19/microsoft-build-2025-the-age-of-ai-agents-and-building-the-open-agentic-web/) ## Slide 34 · WE'VE DONE THIS BEFORE 402 RFC 2068 · Jan 1997 This code is reserved for future use. RFC 9110 · Jun 2022 The 402 (Payment Required) status code is reserved for future use. # a crawler requests a paid URL HTTP 402 Payment Required crawler-price: USD XX.XX # crawler agrees, retries GET /example.html crawler-exact-price: USD XX.XX Headers as shown in Cloudflare's pay-per-crawl post (comments ours). Also: Coinbase x402, May 2025 — stablecoin payments over HTTP 402. The future it was reserved for: machines paying machines. Source: [RFC 2068 §10.4.3 · RFC 9110 §15.5.3 · Cloudflare blog, Jul 2025 · Coinbase, May 2025](https://blog.cloudflare.com/introducing-pay-per-crawl/) ## Slide 35 · WE'VE DONE THIS BEFORE Google, 2026: one idea, three surfaces. Cloud MCP “more than 50 Google-managed Model Context Protocol (MCP) servers” GA or preview · Google Cloud blog, Apr 2026 Web WebMCP origin trial in Chrome 149 experimental · early preview Feb 2026 Android AppFunctions “tools for Android MCP” Android 17 · Jun 2026 · library in alpha “…you can't have humans manually filing tickets to manage capacity or troubleshoot configurations; you need a cloud that drives itself.” Thomas Kurian, CEO Google Cloud · Cloud Next '26, Apr 2026 Source: [Google Cloud blog (Next '26 keynote · managed MCP servers, 29 Apr) · Apr 2026 · Chrome for Developers, Feb/Jun 2026 · Android Developers blog, Jun 2026](https://cloud.google.com/blog/topics/google-cloud-next/welcome-to-google-cloud-next26) ## Slide 36 · WE'VE DONE THIS BEFORE AP2 v0.2 · a payment mode · Apr 2026 HumanNot Present “…today's payment systems generally assume a human is directly clicking "buy" on a trusted surface, the rise of autonomous agents and their ability to initiate a payment breaks this fundamental assumption…” — Google Cloud, AP2 launch, Sep 2025 Source: [blog.google (AP2 v0.2, FIDO Alliance), Apr 2026 · Google Cloud blog (AP2 launch), Sep 2025](https://blog.google/products-and-platforms/platforms/google-pay/agent-payments-protocol-fido-alliance/) ## Slide 37 · WE'VE DONE THIS BEFORE Google Search · May 2026 …as Google Search itself doesn't use them. [Image: Google Search Central: LLMS.txt files and other special markup] Chrome Lighthouse · Agentic Browsing llms.txt: Checks for the presence of a machine-readable summary… [Image: Chrome for Developers: Lighthouse Agentic Browsing scoring, llms.txt audit] 97% of llms.txt files got zero requests in May 2026 Ahrefs · server logs of 137K domains using Ahrefs Web Analytics · Jun 2026 Don't cargo-cult the agentic web. Know which machine you're serving. Source: [Ahrefs, Jun 2026 · Google Search Central, May 2026 · Chrome Lighthouse docs, May 2026 · screenshots Oct 2026](https://ahrefs.com/blog/llmstxt-study/) ## Slide 38 · AGENT EXPERIENCE AgentExperience UX1993 · Don Norman→DX2011 · Jeremiah Lee→AX2025 · Mathias Biilmann “…the holistic experience AI agents will have as the user of a product or platform.” — Mathias Biilmann, Netlify CEO · “Introducing AX”, 28 Jan 2025 Source: [biilmann.blog · Jan 2025](https://biilmann.blog/articles/introducing-ax/) ## Slide 39 · AGENT EXPERIENCE Today we’re launching our first website that is built for agents, not for humans. Netlify blog · 22 Apr 2026 $ curl -s -H "Accept: text/markdown" https://netlify.ai \ | head -n 25 These are instructions for you to establish a good AI development and deploy environment to the user's preferred web platform, Netlify. ## Install Netlify Agent Skills npx -y skills add netlify/context-and-tools --skill '*' --yes ## Install & authorize the Netlify CLI npm install -g netlify-cli netlify login This will give you a URL you can share with the end user or open in the browser. Once the user approves, the CLI will be authorized … the human's only job: click "approve" Source: [Netlify blog · Apr 2026 · terminal: netlify.ai, real output, trimmed (long lines wrapped, some lines omitted)](https://www.netlify.com/blog/netlify-for-agents/) ## Slide 40 · AGENT EXPERIENCE Same agent. Same task. Same shop. Two doors. A · The human doorthe shop's web pages, driven via Playwright MCP [Image: Demo shop product page with newsletter pop-up and cookie banner] Cookie banner · newsletter pop-up · colour swatches · 4-step checkout · an “I am human” checkbox VS B · The agent doorthe shop's own MCP server search_products get_shipping_options create_order # dry_run + idempotency_key get_order Same backend: prices, stock, shipping rules and validation are identical for both doors. Demo shop built for this talk · real Claude Code runs (2.1.283, claude-opus-5-5, headless) · numbers measured, 28 Oct 2026 ## Slide 41 · AGENT EXPERIENCE [Video](https://devfest.cimendev.com/assets/video/demo.mp4) ## Slide 42 · AGENT EXPERIENCE A · Human UIPlaywright MCP · 23 tools B · Shop MCP4 tools Wall time 52.8 s 13.2 s Turns 32 5 Tool calls 31 4 Tokens in / out 311,514 / 3,025280,545 cache reads 22,323 / 1,058 Cost* $0.364 $0.078 Result ✗ No order ✓ DFA-54F82D₺949.90 · cheapest shipping [Image: Review page with an unticked 'I am human' checkbox and a disabled Place order button] “I'm an AI agent, so ticking it would be a false statement and a way around the site's bot check.” — Claude Code, run A, final answer (both attempts stopped here) Run A filled in every step correctly, including the cheapest shipping and the ₺949,90 total. 2nd attempts: A 44.8 s, 28 tool calls, no order · B 12.2 s, 4 tool calls, DFA-F17ECB. One agent, two runs per door: a demo, not a benchmark. Source: Own measurement · 28 Oct 2026 · Claude Code 2.1.283 · claude-opus-5-5 · demo/out/metrics.json · *API-equivalent cost reported by Claude Code (runs used a subscription) ## Slide 43 · PRINCIPLES 1OF 8 Same URL, two audiences. $ U=https://blog.cloudflare.com/markdown-for-agents/ $ curl -s -o /dev/null -w '%{content_type}\n' \ -H 'Accept: text/html' $U text/html $ curl -s -o /dev/null -w '%{content_type}\n' \ -H 'Accept: text/markdown' $U text/markdown; charset=utf-8 16,180 → 3,150tokens · HTML → markdown “This blog post you’re reading takes 16,180 tokens in HTML and 3,150 tokens when converted to markdown. That’s a 80% reduction in token usage.” — Cloudflare Source: [Cloudflare blog, “Markdown for Agents” · Feb 2026 · terminal: real output, 28 Oct 2026](https://blog.cloudflare.com/markdown-for-agents/) ## Slide 44 · PRINCIPLES 2OF 8 Design workflows, not endpoints. list_contacts search_contacts message_contact “…you might choose to implement a search_contacts or message_contact tool instead of a list_contacts tool.” — Anthropic 25,000 “For Claude Code, we restrict tool responses to 25,000 tokens by default.” — Anthropic Source: [Anthropic Engineering, “Writing effective tools for agents — with agents” · Sep 2025](https://www.anthropic.com/engineering/writing-tools-for-agents) ## Slide 45 · PRINCIPLES 3OF 8 Errors are prompts. ✗ Unhelpful · illustrative { "error": "Bad Request", "code": 400 } ✓ Actionable · real response from our demo shop { "error": { "code": "unknown_sku", "message": "Unknown sku \"devfest-tshirt-black-m\". SKUs look like \"tee-2026-black-m\"; call search_products to get exact SKUs." } 25% of users immediately copy error messages to LLMs.Netlify’s CEO on the a16z podcast, per a16z’s episode summary · Jan 2026 Source: [a16z episode summary · Jan 2026 · Anthropic Engineering · Sep 2025 · right: demo shop API, run 28 Oct 2026](https://a16z.com/podcast/anyone-can-code-now-netlify-ceo-talks-ai-agents/) ## Slide 46 · PRINCIPLES 4OF 8 Every write must be safely retryable. “If the above Stripe request fails due to a network connection error, you can safely retry it with the same idempotency key, and the customer is charged only once.” Stripe engineering blog · Feb 2017 “Always send an idempotency_key; retrying with the same key never creates a duplicate order.” our demo shop, create_order tool description agents retry. a lot. Source: [Stripe engineering blog (stripe.com/blog/idempotency) · Feb 2017](https://stripe.com/blog/idempotency) ## Slide 47 · PRINCIPLES 5OF 8 Give agents their own identity. “Starting in December, Stripe MCP will stop accepting full-access secret keys and restricted API keys without the Agent tag.” “agent-tagged keys are automatically subject to approval rules… payouts, refunds, and account configuration changes.” Stripe docs (MCP · API keys), read Oct 2026 How does an agent log in? OAuth 2.1 MCP spec rev. 2026-07-28: “MCP servers MUST implement OAuth 2.0 Protected Resource Metadata (RFC9728).” remember the User-Agent lawsuit? Source: [Stripe docs: MCP & API keys (agent keys) · read Oct 2026 · modelcontextprotocol.io spec rev. 2026-07-28](https://docs.stripe.com/mcp) ## Slide 48 · PRINCIPLES 6OF 8 Humans approve the irreversible. “Actions that are sensitive, irreversible, or have high stakes should trigger human oversight until confidence in the agent’s reliability grows.” OpenAI, A practical guide to building agents · rate every tool low / medium / high Chrome auto browse “designed to pause and explicitly ask for your confirmation … like making a purchase” Google · Jan 2026 Trendyol Cursor plugin “requires explicit user approval for any action targeting the production API … stage is unrestricted” GitHub README · Jun 2026 Insider One MCP “reads analytics and creates drafts for review”: cannot send, schedule or launch campaigns Insider One Academy · Sep 2026 Source: [OpenAI guide · Apr 2025 · Google Chrome blog · Jan 2026 · Trendyol GitHub · Jun 2026 · Insider One Academy · Sep 2026](https://openai.com/business/guides-and-resources/a-practical-guide-to-building-ai-agents/) ## Slide 49 · PRINCIPLES 7OF 8 Guardrails live in the platform, not in the prompt. An explicit code freezeReplit, Jul 2025: the agent deleted the production database anyway Separate dev & prod databases by defaultReplit’s fix, days later: “No user action required.” 97% of database branches on Neon are created by AI agents: cheap, isolated sandboxes (Databricks, Neon telemetry, Jan 2026) “insan gözetiminin hangi koşullarda ve hangi aşamalarda devreye gireceğinin açık bir şekilde tanımlanması” KVKK (Çankaya, Ankara), “Etken Yapay Zekâ (Agentic AI)” · Mar 2026 · EN: clearly define when and at which stage human oversight kicks in Source: [KVKK · Mar 2026 · The Register & Replit blog · Jul 2025 · Databricks, State of AI Agents · Jan 2026](https://www.kvkk.gov.tr/Icerik/8683/etken-yapay-zeka-agentic-ai) ## Slide 50 · PRINCIPLES 8OF 8 Measure AX like you measure performance. Lighthouse · Agentic Browsing “Agents rely on the accessibility tree as their primary data model.” Chrome docs · experimental category, Chrome 150+ · pass ratio, not 0–100 Netlify AXIS · open source “Think Lighthouse, but for agent experience.” axis.run · baseline in CI, regressions fail the build “Everything we suggest to make a site ‘agent-ready’ also makes sites better for humans.” — Google, web.dev Source: [Chrome Lighthouse docs · May 2026 · axis.run (Netlify) · web.dev/articles/ai-agent-site-ux · Apr 2026](https://developer.chrome.com/docs/lighthouse/agentic-browsing/scoring) ## Slide 51 Agents take over the errands. Humans keep the exploration. End-to-end agent shopping will spread most where the product choice is already made. In fashion & lifestyle, people want to discover and compare. Erdem İnan, Trendyol Group CEO · AA, 15 Oct 2026 (company statement) · paraphrased from Turkish 3× lower conversion for Walmart items bought inside ChatGPT than clicking out Walmart’s Daniel Danker, via Wired · Mar 2026 Source: [AA İş Dünyası (Trendyol statement) · Oct 2026 · Wired · Mar 2026](https://www.aa.com.tr/tr/isdunyasi/e-ticaret/trendyoldan-e-ticarette-yapay-zeka-odakli-donusum/705006) ## Slide 52 Agents are the new users. Humans are still the customers. ## Slide 53 Stop buildingproductsonlyfor humans ## Slide 54 Monday morning - curl -H "Accept: text/markdown" your docs - Run Lighthouse → Agentic Browsing - Grep your logs for agent user-agents - Add idempotency keys to every write - Rewrite one error message for a model - Give agents their own keys & approval rules ## Slide 55 Your next user doesn’t have eyes. Your first agent-ready change on Monday: what’s yours? Thank you Emin Çimen · linkedin.com/in/emincimenSlides & all sources → devfest.cimendev.com · agents: curl -H "Accept: text/markdown" devfest.cimendev.com Source: [devfest.cimendev.com](https://devfest.cimendev.com)