Track AI bot share of total requests, bytes egressed to AI crawlers, cache hit ratio for bot traffic, and vendor-level request frequency. Compare those metrics before and after robots.txt or WAF changes to confirm policies worked.