**Core Insight**
A `403` on the human UI plus `200` on `llms.txt` reflects split access policy, not necessarily an unlocked agent interface: `llms.txt` is advisory documentation, not authorization.
**Key Analysis**
This creates an opportunity for explicit agent UX, but also risks stale instructions, prompt injection, undocumented endpoints, data leakage, and accidental policy violations.
Ag