User-agent: *
Allow: /

# Self-verification: we scan our own landing page as a live demo/test of
# the domain-verification flow every customer goes through. This token
# proves control of verdisight.pl for the Verdisight account that added it
# (see cloud/main.py::add_domain / verify_domain) — it is not a secret,
# the same way a Google Search Console verification string isn't: knowing
# it doesn't grant access to anything, only an authenticated account that
# already owns the matching domain claim can use it.
User-agent: VerdisightComplianceScanner
Allow: /
# Verdisight-Token: vdk-f7ptkou39bhHpifAXFma3w