Capability brief · Independent concept · Passive recon only

Amazon already ships the pattern. This is where to point it next.

A respectful, opportunity-framed read of Amazon's public surface: what an AI agent sees today, and where a funded, proof-verified, on-chain-settled work layer would plug into the storefront, the Climate Pledge, and the fulfillment footprint. Every finding is backed by a response Amazon's own servers returned to a normal GET.

Independent & unaffiliated. Unsolicited concept work by EcoWealth Corporation; not requested, reviewed, or endorsed by Amazon. All evidence is passive: standard GETs of published pages and well-known paths, public DNS TXT lookups, and public press. No authentication, no scanning, no fuzzing, no endpoint enumeration beyond standard well-known paths. Marks belong to Amazon; referenced descriptively.

Credit where it's due: Amazon leads on the two hardest things. (1) Its developer org ships a genuine, thoughtfully-authored agent-legibility file: developer.amazon.com/llms.txt = HTTP 200, 950 lines, ~69 KB, opening with an explicit "Instructions for LLMs" section spanning Vega OS, Fire TV, Alexa, and the Appstore. (2) It runs the most advanced agentic-commerce surface in retail: Rufus (renamed Alexa for Shopping, May 2026) took agentic actions for 300M+ shoppers in 2025 and now completes purchases via "Buy for Me." Add a real security.txt (HackerOne bug bounty), HSTS with preload, SPF hard-fail, and real 404s (a random control path 404s too). This brief credits all of that first, then shows where the same rigor hasn't yet reached.

The bottom line, in plain English

Make the shopping and sustainability surfaces legible to agents → the assistants already shopping for people can actually act on Amazon

You've built the agent that buys for shoppers, but a third-party AI sizing up your products or climate record hits nothing it can read — so buying demand that now flows through assistants can't complete, on the exact surfaces you'd want it to. Extending the file your own developer team already ships turns that traffic into orders.

Put a verified receipt under a Climate Pledge ton → a proof-of-outcome the 656 signatories don't have anywhere

The pledge is real but it rests on reported numbers, and as greenwashing scrutiny rises a ton someone can actually verify is worth more than a ton in a PDF — a settled, photo+GPS-backed receipt is a credibility asset your own ESG record can cite.

Turn a fulfillment center's neighborhood into funded, verifiable work → a new ESG line item tied to a real place

Every center sits in a real watershed and community; a restore packet there becomes a funded, proof-verified, citable outcome — a new service line that ties your net-zero spend to a specific location instead of a spreadsheet.

One-line email-policy fix → cheap protection for one of the world's most impersonated brands

Moving DMARC from quarantine to reject closes the residual gap that still lets some spoofed mail through — it won't add sales, but on a brand this impersonated it's a few minutes of protection for customer trust you've already earned.

Five findings: evidenced, non-alarmist

1 Your own developer org ships a production llms.txt: the consumer, sustainability, and Climate Pledge surfaces don't.

What we observed

The pattern every AI-legibility conversation is racing toward is already live inside Amazon: on exactly one surface. Extending it to the surfaces agents actually shop and cite is a copy-the-pattern move, not a research project.

llms.txt is the file AI assistants read first.

# the pattern, already productionized inside Amazon: $ curl -s -o /dev/null -w "%{http_code} %{content_type} %{size_download}\n" \ https://developer.amazon.com/llms.txt 200 text/plain 69083 # 950 lines, "## Instructions for LLMs" # every surface an agent actually shops or cites: a real 404: www.amazon.com/llms.txt 404 www.aboutamazon.com/llms.txt 404 sustainability.aboutamazon.com/llms.txt 404 www.theclimatepledge.com/llms.txt 404 # control /this-is-a-soft404-control-xyz123.txt also 404 → these are REAL 404s
Why it matters to Amazon

This is the strongest possible adoption anchor: EcoWealth isn't proposing an unproven format: it's proposing to extend a file your developer team already ships and maintains. Same author, new surfaces.

2 The house that buys for agents is not legible to agents.

What we observed

Amazon's "Buy for Me" lets its agent transact on a shopper's behalf. But the reverse, a third-party agent (or a machine sizing up Amazon) trying to discover "what can I do here, and how do I pay?", hits nothing structured. There's no agent card (the file that lets an AI assistant use you correctly), no machine-payment discovery, on the consumer surface.

# the storefront's own agent front door: www.amazon.com/.well-known/agent-card.json 404 www.amazon.com/.well-known/ai-plugin.json 404 sustainability.aboutamazon.com/.well-known/agent-card.json 404 # and the ESG surface renders no machine-readable structured data: $ curl -s https://sustainability.aboutamazon.com/ | grep -c application/ld+json 0 # 373 KB of server HTML, 0 schema.org blocks
Why it matters to Amazon

Agentic commerce is a two-way street. Amazon has built the buyer; the seller-facing legibility, priced actions a foreign agent can read and pay, is the missing half, and it's exactly what a standard x402 (a web-native way for AI agents to pay per use) agent-card.json + llms.txt provide. (Honest scope: www.amazon.com/ returns an anti-bot stub to non-browser GETs, so we do not assert a storefront ld+json count: the 0-count above is the sustainability page, which served its full 373 KB HTML.)

3 The Climate Pledge is real and growing, and still a number without a receipt.

What we observed

Amazon co-founded The Climate Pledge; it now has 656 signatories (107 added in 2026, while others go quiet). The collective promise, net-zero by 2040, ~2.5 billion tonnes of emissions avoided annually at maturity, rests on reported figures. Meanwhile Amazon's own footprint rose 16% to ~80.9M tCO2e in 2025, driven by AI data-center buildout. The pledge machinery is prose and PDF; nothing an agent can verify.

# the Pledge's public robots.txt is an allow-all stub: no sitemap, no llms: $ curl -s https://www.theclimatepledge.com/robots.txt User-agent: * Disallow: # theclimatepledge.com/llms.txt → 404 · sustainability page ld+json → 0
Why it matters to Amazon

In a world where the SEC climate rule is softening and greenwashing scrutiny is rising, a verified outcome is worth more than a reported one. EWP puts a settled, photo+GPS+method-backed tCO2e receipt under each funded ton: the proof-of-outcome layer 656 signatories don't have anywhere.

4 Every fulfillment center is a PLACE with a community, and no proof-verified work layer wired to it.

What we observed

Amazon operates ~350 fulfillment centers inside ~1,200 facilities, with roughly 1 million operations workers: the largest logistics-labor footprint in the United States (1.576M total employees at end-2025). Each center sits in a real watershed, a real neighborhood, a real airshed. The Climate Pledge and the community exist in the same coordinates; nothing connects them as fundable, verifiable work.

Why it matters to Amazon

EWP is place-native: place + problem → bounded work packet. A restore packet (riparian planting, heat-island tree canopy, stormwater retention) around a specific FC becomes a funded, claimed, proof-verified, on-chain-settled outcome: tied to that location and that community, citable in the site's own ESG record. The three ladders (Build · Grow & Cook · Restore) are step-1-anyone-today up to mastery, so a warehouse community can start immediately.

5 Strong estate, one email-hygiene note (stated for completeness).

What we observed
# SPF is a hard-fail (good); DMARC is quarantine, not reject: _dmarc.amazon.com TXT "v=DMARC1; p=quarantine; pct=100; rua=…" # peers on this list enforce p=reject (Meta, X). quarantine still lets some spoof through.
Why it matters to Amazon

A one-line policy change (p=quarantinep=reject) closes the residual spoofing gap on a brand this impersonated. Minor, and offered only because "ruthless" means honest: the rest of the security baseline (security.txt, HSTS preload, real 404s) is genuinely strong.

The integration path (warm, zero system access)

Phase 0: today, no Amazon changes: an Agent Kit over Amazon's public data on EcoWealth infra + one proof-verified restore packet funded on Base near a named fulfillment center (the built demo). Phase 1: pilot: extend the developer-org llms.txt pattern to the consumer/sustainability surfaces and expose a priced agent-card.json; light up a proof-of-outcome lane under one Climate Pledge line item. Phase 2: at volume: a climate/community budget funds packets around fulfillment centers; each dollar becomes a settled, citable outcome that appends to the ESG record.

Evidence log

ClaimStatus / valueRe-verify
Developer portal ships a real llms.txt200, text/plain, 69,083 B, 950 linescurl -s https://developer.amazon.com/llms.txt | head
Consumer/sustainability/Pledge llms.txt absentall 404 (control 404 too → real)curl -s -o /dev/null -w '%{http_code}' https://www.amazon.com/llms.txt
No consumer agent card/.well-known/agent-card.json = 404curl -sI https://www.amazon.com/.well-known/agent-card.json
Sustainability page carries no structured data373 KB HTML, ld+json = 0curl -s https://sustainability.aboutamazon.com/ | grep -c application/ld+json
Climate Pledge robots is an allow-all stub200, 23 B, no sitemapcurl -s https://www.theclimatepledge.com/robots.txt
DMARC is quarantine, not rejectp=quarantinedig +short TXT _dmarc.amazon.com
Real security.txt (credited)200 → HackerOne amazonvrpcurl -s https://www.amazon.com/.well-known/security.txt
656 Climate Pledge signatories; emissions +16%public press, 2026WebSearch "Amazon Climate Pledge 656 signatories emissions 16%"
Rufus → "Buy for Me" agentic commerce live300M+ shoppers 2025; renamed Alexa for Shopping May 2026WebSearch "Amazon Rufus Buy for Me agentic 2026"
EWP live on Base mainnetcontract 0x76c17C…A14B, workId 14BaseScan the contract; curl -s https://vealth.net/.well-known/x402

The ask: proof first, then a look

Not "let's talk." Pick one small step; the deliverable is an on-chain receipt, not a meeting. Both are pocket change against ~$0.7T revenue and tie straight to net-zero 2040:

$40: fund one proof-verified restore packet near a named fulfillment center (the built demo). It returns a settled, photo+GPS+method-backed receipt on Base: one verified ton under the Climate Pledge number, in one afternoon.

$0.10: or have one agent make a single keyless x402 call to our live work-packet endpoint and watch a real bounded packet come back. Reproducible now: curl https://vealth.net/.well-known/x402.

Then fifteen minutes to look at the result in Amazon's palette: no system access, nothing probed. Everything in this brief was read from your own public responses.

Provisioned by EcoWealth · Digital Provisioning Protocol · provenance‑sealed