HTTP
Enable an AI agent to recognise HTTP interactions, assess their semantic and operational state, and determine which requests, retries, reuse and forwarding actions are justified.
Bundle → Layer → Finding → Questions Filled
6 bundles · 11 layers · 18 findings · 29 questions
Request intent and resource Records which resource an HTTP request addresses and what its method asks the recipient to do.
Target and authority
Distinguishes the target URI and authority from the peer or intermediary receiving the message.
Effective request target
Record the target URI and the evidence used to establish its scheme, authority and resource identifier.
- Which URI is targeted, and how do the request-target form, authority fields or pseudo-fields establish it? definition
- Is the contacted peer the origin server, a forward proxy, a gateway or a tunnel endpoint? boundary
Method and effect
Separates standard method properties from observed or documented application behaviour.
Method semantics and guarantees
Record the method's defined semantics, safety and idempotency, together with evidence of any application-specific guarantees or deviations.
- What does this method request, and are its safety and idempotency properties defined by an applicable specification? definition
- What evidence supports the expected effects at this resource, including any request-content semantics or restrictions? provenance
Responses and representations Records what a response means and how its content relates to a selected representation.
Status and response sequence
Interprets informational and final responses in the context of the originating request.
Response meaning
Record the response sequence and distinguish HTTP-level outcomes from application results requiring separate evidence.
- Which responses are informational, which is final, and what does the final status mean for this request method? definition
- What remains unproven about the application outcome, particularly for accepted processing, absent content or an interrupted response? boundary
Content and negotiation
Connects representation metadata and selection criteria to the content actually exchanged.
Selected representation
Record declared representation properties, negotiation inputs and any mismatch between metadata and observed content.
- Which media type, content coding and language are declared, and what evidence confirms or contradicts those declarations? measurement
- Which request preferences influenced representation selection, and is content expected or permitted for this method and status? boundary
Caching and conditional transfer Records when an HTTP response can be reused and how validators or ranges constrain subsequent transfers.
Stored response reuse
Evaluates storage and reuse in the context of a private or shared cache.
Cache selection and freshness
Record cache context, matching criteria, directives, age and freshness evidence before reusing a response.
- May this cache store and reuse the response, considering its private or shared role, method, status and applicable directives? action
- Do the target, method and Vary-selected request fields match, and what calculated age and freshness lifetime govern reuse? measurement
Validators, preconditions and ranges
Uses representation validators to condition operations and assess partial transfers.
Conditional operation
Record available entity tags or modification dates, their comparison requirements, and the intended role of preconditions or ranges.
- Which validators are available, and does the proposed precondition require a strong or weak comparison? definition
- Which conditional fields would validate a cached response or guard an update, and how should a 304 or 412 response change the next action? action
- If a range is requested, what supports range handling and representation continuity, and how will 206, 416 or a full response be handled? action
Messaging path and completion Records version-specific message boundaries, intermediary transformations and evidence of exchange completion.
Version, framing and intermediaries
Relates shared HTTP semantics to the encoding and forwarding rules used on each observed hop.
Message boundaries and forwarding
Record the HTTP version, framing evidence and known intermediary changes without assuming end-to-end wire equivalence.
- Which HTTP version is observed on each known hop, and what establishes the end of the message content and any trailers? measurement
- Could conflicting length indicators, invalid fields or intermediary transformations cause different recipients to interpret different message boundaries? boundary
Failure and retry
Separates transport or stream failure from knowledge of whether the requested operation took effect.
Completion evidence and repetition
Record how far the exchange progressed and what evidence justifies repeating it.
- What evidence shows whether the request was transmitted, processed or answered completely, and where does the outcome remain unknown? measurement
- Do method semantics, a version-specific failure signal or a documented application guarantee justify a retry, and what timing guidance applies? action
Credentials and follow-up boundaries Records HTTP authentication and routing signals that affect the authority and scope of subsequent requests.
Authentication and state context
Distinguishes origin authentication, proxy authentication and application state carried in HTTP fields.
Credential recipient and scope
Record challenges and credential or cookie scope through references that avoid retaining secret values unnecessarily.
- Does the response challenge origin authentication or proxy authentication, and which scheme and protection space does it identify? definition
- Which credentials or cookies may accompany the next request, based on recipient scope, applicable client policy and the agent's existing authority? action
Redirects and protocol transitions
Evaluates changes to the request destination, method or communication mode.
Follow-up request boundary
Record what a redirect, successful CONNECT or protocol upgrade proposes and which semantics continue to apply.
- For a redirect, how is Location resolved, what method and content behaviour applies, and does the destination change origin or scheme? action
- If a tunnel or protocol upgrade is established, where does ordinary HTTP message interpretation stop and the neighbouring protocol model take over? boundary
Evidence and external alignment What the world already says about this thing, gathered so the model can be checked against it.
Reported evidence
Findings from the breadth pass, kept separate from the structural claims.
Kinds and varieties
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Which of these kinds and varieties hold for the sense of HTTP this model covers, and on what evidence? provenance
Identifiers and schemes
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Which of these identifiers and schemes hold for the sense of HTTP this model covers, and on what evidence? provenance
Standards and regulation
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Which of these standards and regulation hold for the sense of HTTP this model covers, and on what evidence? provenance
Real-world use
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Which of these real-world use hold for the sense of HTTP this model covers, and on what evidence? provenance
Typical measurements
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Which of these typical measurements hold for the sense of HTTP this model covers, and on what evidence? provenance
Failure modes and hazards
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Which of these failure modes and hazards hold for the sense of HTTP this model covers, and on what evidence? provenance
Regional variation
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Which of these regional variation hold for the sense of HTTP this model covers, and on what evidence? provenance
Neighbouring kinds and how to tell them apart
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Which of these neighbouring kinds and how to tell them apart hold for the sense of HTTP this model covers, and on what evidence? provenance
Classifiers Filled
- Family
- Thing Registry
- Category
- Information and virtual systems
- Entry kind
- thing
- Plane
- INF
- Domain
- INF.KNW
- Other names and narrower kinds
- Secure Hypertext Transfer Protocol, HTTPS
What it is Filled
HTTP is a generic, stateless, application-layer request/response protocol that transfers representations of URI-identified resources using self-descriptive messages, with version-specific mappings onto TCP (HTTP/1.x), a binary framed layer over TCP with or without TLS (HTTP/2), or QUIC (HTTP/3), as defined by the IETF HTTP specifications centred on RFC 9110.
In scope
- Request methods, target URIs, fields and response status semantics
- Representation metadata, content negotiation and message content
- Conditional requests, partial transfers and cache reuse
- HTTP versions, message framing, streams and intermediary behaviour
- Protocol-level evidence governing authentication, redirection, retries and completion
Out of scope
- Application-specific resource schemas, business rules and transaction guarantees
- DNS resolution and domain ownership
- TCP and QUIC transport internals
- TLS cryptography, certificate lifecycle and trust administration
- Browser document rendering, JavaScript execution and browser policy configuration
- Service deployment, infrastructure capacity and organisational access governance
Why it exists Filled
Enable an AI agent to recognise HTTP interactions, assess their semantic and operational state, and determine which requests, retries, reuse and forwarding actions are justified.
Distinguishing features Filled
- An interaction uses HTTP method and status semantics; carrying bytes over TCP or QUIC alone does not make it HTTP.
- An HTTPS URI identifies HTTP communication secured through TLS, rather than a separate application semantics model.
- HTTP can carry many representation formats; HTML or JSON content alone does not identify the protocol.
- HTTP does not require REST architectural constraints, and a REST claim does not establish which HTTP semantics an API honours.
- HTTP/1.1, HTTP/2 and HTTP/3 share core semantics while differing in message encoding and connection or stream handling; textual start lines are not a universal recognition test.
What robots and AI may and may not do Filled
Must not
- Send requests to probe, overload or exploit services it is not authorized to test.
- Use plain HTTP to send passwords or personal data.
- Ignore a site's robots rules, rate limits or terms when crawling.
- Forge headers to impersonate another client or user.
Only with a human decision
- Running load tests or security scans against production services.
May
- Send HTTP requests to services it is authorized to use, respecting their terms and rate limits.
- Explain HTTP methods, status codes and headers from the specifications.
Moral aspects Filled
- HTTP carries much of people's online life, so security and privacy matter.
- Automated traffic can overload small sites.
Who is affected
- Users of web services
- Site operators
- Developers
Owners Filled
Steward
Nobody owns the protocol; the IETF maintains its specifications.
Links to other meta-models Filled
parent
- Q15836568 - registry parent class
What else AI and robots need to interact with it Filled
Identity and identifiers required Filled
- Vercy registry: vr.tr.http
- Wikidata: Q8777 (https://www.wikidata.org/wiki/Q8777)
Direct properties not applicable Not applicable
- Observed HTTP version: HTTP/1.0 | HTTP/1.1 | HTTP/2 | HTTP/3 | other | unknown; recorded per hop
- Request method: Case-sensitive method token with known, extension or unknown semantics
- Target resource: Target URI, its scheme and authority, and its relationship to the contacted peer
- Response status: Observed three-digit status code, informational or final role, and known or unknown meaning
- Exchange completion: Not sent | in progress | informational response received | final response incomplete | complete | failed | outcome unknown
- Representation description: Declared media type, content coding, language and presence or absence of relevant metadata
- Cache reuse eligibility: Not evaluated | reusable while fresh | validation required | stale reuse permitted under recorded conditions | reuse prohibited
- Freshness lifetime and current age: Seconds, with calculation inputs and observation time
- Retry justification: Not assessed | justified by method and failure evidence | justified by an application guarantee | unjustified | uncertain
Plane INF: no invented physical properties.
Recognition not applicable Not applicable
Not applicable
HTTP is an abstract communication protocol whose identity requires interpretation of messages or metadata rather than visual identification.
Capabilities and actions required Filled
- Interpret a request and its response sequence using the applicable HTTP semantics.
- Construct a request with suitable method, target, negotiation fields and preconditions.
- Assess whether a failed or interrupted request may be retried and record the justification.
- Decide whether a stored response may be reused, validated or replaced.
- Evaluate a redirect or authentication challenge before choosing a follow-up request.
- Diagnose protocol inconsistencies across message framing, intermediaries and version boundaries.
Hazards and failure modes required Filled
- Unencrypted HTTP traffic can expose credentials, personal information and transferred content to interception or modification.
- Automatic retries of operations without suitable safeguards can duplicate purchases, submissions or other state changes.
- Incorrect caching can disclose private responses or deliver outdated information.
- Inconsistent message interpretation between intermediaries and servers can undermine access controls and request routing.
Standards and interfaces required Filled
- HTTP Semantics, RFC 9110, Internet Engineering Task Force (IETF).
Context of use required Filled
- HTTP carries requests and responses between web clients, servers and intermediaries.
- It is used to retrieve documents and media, exchange application data and invoke operations through web interfaces.
Sources Filled
- RFC 9110: HTTP Semantics - Normative definition of HTTP as a protocol family, methods, status codes, fields, and resource/representation model
- RFC 9112: HTTP/1.1 - HTTP/1.1 message syntax, persistent connections, and chunked transfer coding
- RFC 9113: HTTP/2 - HTTP/2 binary framing, streams, and HPACK; ALPN token h2
- RFC 9114: HTTP/3 - HTTP/3 mapping onto QUIC; distinction from the QUIC transport itself
- RFC 2818: HTTP Over TLS - HTTPS as HTTP over TLS, https URI scheme, and default port 443
- Fetch Standard - Browser-facing HTTP client behaviour, CORS, and redirects as implemented on the Web
- Hypertext Transfer Protocol (Q8777) - Stable public identifier for the protocol as a catalogue item
- Wikipedia: HTTP - general description of the item
Open questions
- With no registry definition recorded, should this entry cover only the HTTP protocol family or also provide reusable records for individual exchanges and endpoint capabilities?
- Which specification baseline and extension set should be adopted, including treatment of legacy HTTP/1.0, registered extension methods and evolving field definitions?
- Where should the catalogue place cookie handling and browser-enforced policies so that this model can reference their effects without duplicating ownership?
- What evidence will normally be available across intermediaries, and how should the model express conclusions that are valid only for one observed hop?
- Which neighbouring model owns application-level idempotency keys and asynchronous operation completion, and what evidence must HTTP retry decisions obtain from it?
Machine files
Provenance
thing registry research (pass 2) · unreviewed
Built from: models/things/publications/thing-q8777/spec.json