Definition. The well-known AOM policy is a JSON document served at a fixed path on an origin. It declares the default agent automation policy for that origin. Agents that implement this mechanism MUST respect it for the origin.
URL. /.well-known/aom-policy.json at the origin (e.g. https://example.com/.well-known/aom-policy.json). Content-Type: application/json.
| Field | Type | Values | Meaning |
|---|---|---|---|
automation_policy |
string | "forbidden" | "allowed" | "open" |
Default policy for this origin. See below. |
aom_version |
string | e.g. "0.1.0" |
Format version. Optional; recommended for compatibility. |
expires |
string | ISO 8601 date-time | When the policy is stale. Optional. If present and in the past, agents SHOULD re-fetch or treat as invalid. |
Unknown fields MUST be ignored by agents.
Meaning of automation_policy:
forbidden — No agent automation on this origin unless a per-page AOM overrides it.allowed — Agents may use surfaces when present.open — This origin publishes AOM in the open by default.expires in the past: Treat as stale; re-fetch or fall back to per-page AOM / no automation for this origin.automation_policy takes precedence for that page.Use one of these as the content for /.well-known/aom-policy.json:
Update expires and optionally aom_version before deploying.