Cloudflare auto-injecting Disallow for GPTBot, ClaudeBot, Google-Extended
The source robots.txt is correct — but Cloudflare's managed content block injects Disallow: / for GPTBot, ClaudeBot, and Google-Extended above the manual Allow rules. RFC 9309 first-match-wins parsers will treat these bots as blocked. Live citation crawlers (Bingbot, OAI-SearchBot, PerplexityBot) are unaffected and clean. Fix: Cloudflare dashboard → Security → Bots → AI Scrapers and Crawlers → set the three bots to Allow.