AI crawler policy now sits across search bots, training bots, product tokens, WAF rules, and canonical behavior. Sites that want ChatGPT visibility without opening everything need a deliberate per-bot operating model, not a blunt allow-or-block setting.