← Back to catalogue
Published

HTTP

vr.tr.http · thing-q8777

Enable an AI agent to recognise HTTP interactions, assess their semantic and operational state, and determine which requests, retries, reuse and forwarding actions are justified.

Thing Registry Information and virtual systems INF.KNW

Bundle → Layer → Finding → Questions Filled

6 bundles · 11 layers · 18 findings · 29 questions

Request intent and resource Records which resource an HTTP request addresses and what its method asks the recipient to do.

Target and authority

Distinguishes the target URI and authority from the peer or intermediary receiving the message.

Effective request target

Record the target URI and the evidence used to establish its scheme, authority and resource identifier.

  1. Which URI is targeted, and how do the request-target form, authority fields or pseudo-fields establish it? definition
  2. Is the contacted peer the origin server, a forward proxy, a gateway or a tunnel endpoint? boundary

Method and effect

Separates standard method properties from observed or documented application behaviour.

Method semantics and guarantees

Record the method's defined semantics, safety and idempotency, together with evidence of any application-specific guarantees or deviations.

  1. What does this method request, and are its safety and idempotency properties defined by an applicable specification? definition
  2. What evidence supports the expected effects at this resource, including any request-content semantics or restrictions? provenance
Responses and representations Records what a response means and how its content relates to a selected representation.

Status and response sequence

Interprets informational and final responses in the context of the originating request.

Response meaning

Record the response sequence and distinguish HTTP-level outcomes from application results requiring separate evidence.

  1. Which responses are informational, which is final, and what does the final status mean for this request method? definition
  2. What remains unproven about the application outcome, particularly for accepted processing, absent content or an interrupted response? boundary

Content and negotiation

Connects representation metadata and selection criteria to the content actually exchanged.

Selected representation

Record declared representation properties, negotiation inputs and any mismatch between metadata and observed content.

  1. Which media type, content coding and language are declared, and what evidence confirms or contradicts those declarations? measurement
  2. Which request preferences influenced representation selection, and is content expected or permitted for this method and status? boundary
Caching and conditional transfer Records when an HTTP response can be reused and how validators or ranges constrain subsequent transfers.

Stored response reuse

Evaluates storage and reuse in the context of a private or shared cache.

Cache selection and freshness

Record cache context, matching criteria, directives, age and freshness evidence before reusing a response.

  1. May this cache store and reuse the response, considering its private or shared role, method, status and applicable directives? action
  2. Do the target, method and Vary-selected request fields match, and what calculated age and freshness lifetime govern reuse? measurement

Validators, preconditions and ranges

Uses representation validators to condition operations and assess partial transfers.

Conditional operation

Record available entity tags or modification dates, their comparison requirements, and the intended role of preconditions or ranges.

  1. Which validators are available, and does the proposed precondition require a strong or weak comparison? definition
  2. Which conditional fields would validate a cached response or guard an update, and how should a 304 or 412 response change the next action? action
  3. If a range is requested, what supports range handling and representation continuity, and how will 206, 416 or a full response be handled? action
Messaging path and completion Records version-specific message boundaries, intermediary transformations and evidence of exchange completion.

Version, framing and intermediaries

Relates shared HTTP semantics to the encoding and forwarding rules used on each observed hop.

Message boundaries and forwarding

Record the HTTP version, framing evidence and known intermediary changes without assuming end-to-end wire equivalence.

  1. Which HTTP version is observed on each known hop, and what establishes the end of the message content and any trailers? measurement
  2. Could conflicting length indicators, invalid fields or intermediary transformations cause different recipients to interpret different message boundaries? boundary

Failure and retry

Separates transport or stream failure from knowledge of whether the requested operation took effect.

Completion evidence and repetition

Record how far the exchange progressed and what evidence justifies repeating it.

  1. What evidence shows whether the request was transmitted, processed or answered completely, and where does the outcome remain unknown? measurement
  2. Do method semantics, a version-specific failure signal or a documented application guarantee justify a retry, and what timing guidance applies? action
Credentials and follow-up boundaries Records HTTP authentication and routing signals that affect the authority and scope of subsequent requests.

Authentication and state context

Distinguishes origin authentication, proxy authentication and application state carried in HTTP fields.

Credential recipient and scope

Record challenges and credential or cookie scope through references that avoid retaining secret values unnecessarily.

  1. Does the response challenge origin authentication or proxy authentication, and which scheme and protection space does it identify? definition
  2. Which credentials or cookies may accompany the next request, based on recipient scope, applicable client policy and the agent's existing authority? action

Redirects and protocol transitions

Evaluates changes to the request destination, method or communication mode.

Follow-up request boundary

Record what a redirect, successful CONNECT or protocol upgrade proposes and which semantics continue to apply.

  1. For a redirect, how is Location resolved, what method and content behaviour applies, and does the destination change origin or scheme? action
  2. If a tunnel or protocol upgrade is established, where does ordinary HTTP message interpretation stop and the neighbouring protocol model take over? boundary
Evidence and external alignment What the world already says about this thing, gathered so the model can be checked against it.

Reported evidence

Findings from the breadth pass, kept separate from the structural claims.

Kinds and varieties

Reported by the breadth pass; each item needs checking against its source before it becomes normative.

  1. Which of these kinds and varieties hold for the sense of HTTP this model covers, and on what evidence? provenance

Identifiers and schemes

Reported by the breadth pass; each item needs checking against its source before it becomes normative.

  1. Which of these identifiers and schemes hold for the sense of HTTP this model covers, and on what evidence? provenance

Standards and regulation

Reported by the breadth pass; each item needs checking against its source before it becomes normative.

  1. Which of these standards and regulation hold for the sense of HTTP this model covers, and on what evidence? provenance

Real-world use

Reported by the breadth pass; each item needs checking against its source before it becomes normative.

  1. Which of these real-world use hold for the sense of HTTP this model covers, and on what evidence? provenance

Typical measurements

Reported by the breadth pass; each item needs checking against its source before it becomes normative.

  1. Which of these typical measurements hold for the sense of HTTP this model covers, and on what evidence? provenance

Failure modes and hazards

Reported by the breadth pass; each item needs checking against its source before it becomes normative.

  1. Which of these failure modes and hazards hold for the sense of HTTP this model covers, and on what evidence? provenance

Regional variation

Reported by the breadth pass; each item needs checking against its source before it becomes normative.

  1. Which of these regional variation hold for the sense of HTTP this model covers, and on what evidence? provenance

Neighbouring kinds and how to tell them apart

Reported by the breadth pass; each item needs checking against its source before it becomes normative.

  1. Which of these neighbouring kinds and how to tell them apart hold for the sense of HTTP this model covers, and on what evidence? provenance

Classifiers Filled

Family
Thing Registry
Category
Information and virtual systems
Entry kind
thing
Plane
INF
Domain
INF.KNW
Other names and narrower kinds
Secure Hypertext Transfer Protocol, HTTPS

What it is Filled

HTTP is a generic, stateless, application-layer request/response protocol that transfers representations of URI-identified resources using self-descriptive messages, with version-specific mappings onto TCP (HTTP/1.x), a binary framed layer over TCP with or without TLS (HTTP/2), or QUIC (HTTP/3), as defined by the IETF HTTP specifications centred on RFC 9110.

In scope

  • Request methods, target URIs, fields and response status semantics
  • Representation metadata, content negotiation and message content
  • Conditional requests, partial transfers and cache reuse
  • HTTP versions, message framing, streams and intermediary behaviour
  • Protocol-level evidence governing authentication, redirection, retries and completion

Out of scope

  • Application-specific resource schemas, business rules and transaction guarantees
  • DNS resolution and domain ownership
  • TCP and QUIC transport internals
  • TLS cryptography, certificate lifecycle and trust administration
  • Browser document rendering, JavaScript execution and browser policy configuration
  • Service deployment, infrastructure capacity and organisational access governance

Why it exists Filled

Enable an AI agent to recognise HTTP interactions, assess their semantic and operational state, and determine which requests, retries, reuse and forwarding actions are justified.

Distinguishing features Filled

  • An interaction uses HTTP method and status semantics; carrying bytes over TCP or QUIC alone does not make it HTTP.
  • An HTTPS URI identifies HTTP communication secured through TLS, rather than a separate application semantics model.
  • HTTP can carry many representation formats; HTML or JSON content alone does not identify the protocol.
  • HTTP does not require REST architectural constraints, and a REST claim does not establish which HTTP semantics an API honours.
  • HTTP/1.1, HTTP/2 and HTTP/3 share core semantics while differing in message encoding and connection or stream handling; textual start lines are not a universal recognition test.

What robots and AI may and may not do Filled

Must not

  • Send requests to probe, overload or exploit services it is not authorized to test.
  • Use plain HTTP to send passwords or personal data.
  • Ignore a site's robots rules, rate limits or terms when crawling.
  • Forge headers to impersonate another client or user.

Only with a human decision

  • Running load tests or security scans against production services.

May

  • Send HTTP requests to services it is authorized to use, respecting their terms and rate limits.
  • Explain HTTP methods, status codes and headers from the specifications.

Moral aspects Filled

  • HTTP carries much of people's online life, so security and privacy matter.
  • Automated traffic can overload small sites.

Who is affected

  • Users of web services
  • Site operators
  • Developers

Owners Filled

Steward

Nobody owns the protocol; the IETF maintains its specifications.

Links to other meta-models Filled

parent

  • Q15836568 - registry parent class

What else AI and robots need to interact with it Filled

Identity and identifiers required Filled

  • Vercy registry: vr.tr.http
  • Wikidata: Q8777 (https://www.wikidata.org/wiki/Q8777)

Direct properties not applicable Not applicable

  • Observed HTTP version: HTTP/1.0 | HTTP/1.1 | HTTP/2 | HTTP/3 | other | unknown; recorded per hop
  • Request method: Case-sensitive method token with known, extension or unknown semantics
  • Target resource: Target URI, its scheme and authority, and its relationship to the contacted peer
  • Response status: Observed three-digit status code, informational or final role, and known or unknown meaning
  • Exchange completion: Not sent | in progress | informational response received | final response incomplete | complete | failed | outcome unknown
  • Representation description: Declared media type, content coding, language and presence or absence of relevant metadata
  • Cache reuse eligibility: Not evaluated | reusable while fresh | validation required | stale reuse permitted under recorded conditions | reuse prohibited
  • Freshness lifetime and current age: Seconds, with calculation inputs and observation time
  • Retry justification: Not assessed | justified by method and failure evidence | justified by an application guarantee | unjustified | uncertain

Plane INF: no invented physical properties.

Recognition not applicable Not applicable

Not applicable

HTTP is an abstract communication protocol whose identity requires interpretation of messages or metadata rather than visual identification.

Capabilities and actions required Filled

  • Interpret a request and its response sequence using the applicable HTTP semantics.
  • Construct a request with suitable method, target, negotiation fields and preconditions.
  • Assess whether a failed or interrupted request may be retried and record the justification.
  • Decide whether a stored response may be reused, validated or replaced.
  • Evaluate a redirect or authentication challenge before choosing a follow-up request.
  • Diagnose protocol inconsistencies across message framing, intermediaries and version boundaries.

Hazards and failure modes required Filled

  • Unencrypted HTTP traffic can expose credentials, personal information and transferred content to interception or modification.
  • Automatic retries of operations without suitable safeguards can duplicate purchases, submissions or other state changes.
  • Incorrect caching can disclose private responses or deliver outdated information.
  • Inconsistent message interpretation between intermediaries and servers can undermine access controls and request routing.

Standards and interfaces required Filled

  • HTTP Semantics, RFC 9110, Internet Engineering Task Force (IETF).

Context of use required Filled

  • HTTP carries requests and responses between web clients, servers and intermediaries.
  • It is used to retrieve documents and media, exchange application data and invoke operations through web interfaces.

Sources Filled

  1. RFC 9110: HTTP Semantics - Normative definition of HTTP as a protocol family, methods, status codes, fields, and resource/representation model
  2. RFC 9112: HTTP/1.1 - HTTP/1.1 message syntax, persistent connections, and chunked transfer coding
  3. RFC 9113: HTTP/2 - HTTP/2 binary framing, streams, and HPACK; ALPN token h2
  4. RFC 9114: HTTP/3 - HTTP/3 mapping onto QUIC; distinction from the QUIC transport itself
  5. RFC 2818: HTTP Over TLS - HTTPS as HTTP over TLS, https URI scheme, and default port 443
  6. Fetch Standard - Browser-facing HTTP client behaviour, CORS, and redirects as implemented on the Web
  7. Hypertext Transfer Protocol (Q8777) - Stable public identifier for the protocol as a catalogue item
  8. Wikipedia: HTTP - general description of the item

Open questions

  • With no registry definition recorded, should this entry cover only the HTTP protocol family or also provide reusable records for individual exchanges and endpoint capabilities?
  • Which specification baseline and extension set should be adopted, including treatment of legacy HTTP/1.0, registered extension methods and evolving field definitions?
  • Where should the catalogue place cookie handling and browser-enforced policies so that this model can reference their effects without duplicating ownership?
  • What evidence will normally be available across intermediaries, and how should the model express conclusions that are valid only for one observed hop?
  • Which neighbouring model owns application-level idempotency keys and asynchronous operation completion, and what evidence must HTTP retry decisions obtain from it?

Machine files

Provenance

thing registry research (pass 2) · unreviewed

Built from: models/things/publications/thing-q8777/spec.json