I Built a Browser SDK That Classifies Sessions Into Three Categories, Not Two

Every bot detection system I've seen works with two actors: human or bot. Block the bot, let the human through. That model is wrong in 2026. There is a third actor: AI agents acting legitimately on be