CiteTrack uses first-party session signals to separate AI assistant visits from ordinary Direct traffic. Newer versions sign those session IDs so forged or old unsigned values cannot pollute attribution.
What changed
Unsigned legacy session IDs are rejected and replaced naturally on the next visit. Signed sessions include server-verifiable expiry, so a stale or forged value cannot claim a new AI referral forever.
Why it matters
- Cleaner AI referral analytics.
- Less duplicate or suspicious tracking activity.
- Better protection against public-request abuse.
- More reliable revenue attribution when a real AI session later converts.
This is a reliability feature, not a tracking expansion. It makes existing first-party attribution harder to forge and easier to expire.