A website can place operational requests in llms.txt, HTTP headers or other retrieved metadata; the failure occurs when an agent treats that lower-trust content as permission for registration, installation or tool execution.
Direct edits to model parameters can change deployed behavior without a conventional fine-tune, so confidence requires checkpoint provenance and behavioral regression, not a familiar model name.