The edge verified only the original form of Signature-Agent, a quoted string signed as "signature-agent". It now also verifies the dictionary form of the current Web Bot Auth draft, Signature-Agent: sig1="https://…" signed as "signature-agent";key="sig1". A request is attributed only to the member its signature covers; unsigned members and members with parameters are ignored.
The bot catalog now includes the Web Bot Auth directory of OpenWAF Browsers. Until today, its signed requests were counted as unverified automation on sites behind OpenWAF; they now appear as the verified bot openwaf-browsers (category AI user agent) in the reports, and you can use that id in per-bot overrides.