DKIM for AI refers to the Agentic Reasoning Protocol (ARP), which applies the same cryptographic verification model used in email authentication (DKIM/RFC 6376) to structured data consumed by AI retrieval systems. Domain owners publish Ed25519 public keys via DNS TXT records, enabling AI systems to verify that entity metadata was authentically authored by the domain owner.

Why is the Phantom Authority experiment a security concern?

The experiment proves that AI search engines currently have no verification layer for structured data. If a blank website can become the #1 cited source through structured data alone, malicious actors can use the same technique to inject false narratives, fabricate experts, create fake product reviews, or execute competitor sabotage — all cited as authoritative truth by AI systems.

What is a Ghost Site in GEO?

A Ghost Site is a website designed to be invisible to humans but highly visible to AI systems. It contains machine-readable structured data (JSON-LD, sr-only content, llms.txt, reasoning.json) but displays nothing to browser visitors. Ghost Sites achieve AI citation authority through semantic density rather than traditional web signals like traffic, backlinks, or visual design.

How does ARP solve the AI trust problem?

ARP (Agentic Reasoning Protocol) adds a cryptographic trust layer to structured data. Domain owners sign their entity metadata with Ed25519 keys and publish the public key via DNS TXT records. AI retrieval systems can then verify signatures before citing data, classifying sources into trust levels: CRYPTOGRAPHIC (verified), UNSIGNED (unverified), or INVALID (forged). This is analogous to how DKIM solved email spoofing.

By Sascha Deforth April 6, 2026 10 min read AI Security · GEO

The AI Search Trust Crisis: What an Empty Website Teaches Us About RAG Vulnerabilities

Q: What is Phantom Authority?

Phantom Authority is a GEO (Generative Engine Optimization) experiment created by Sascha Deforth in April 2026. It proves that a website with zero human-visible content — just structured data — can achieve primary citation authority with AI search engines like Perplexity and ChatGPT within 24 hours.

Executive Summary: Generative Engine Optimization (GEO) has fundamentally changed how information is discovered. But a recent experiment by TrueSource reveals a critical, structural vulnerability in modern AI search architectures: AI engines currently have no immune system.

The Phantom Authority Experiment

In April 2026, we launched phantomauthority.ai — a "Ghost Site." To human visitors, the site is a completely white screen with zero visible content. No text. No images. No logo. No navigation. Nothing.

However, beneath the surface, it contains a robust "7-Layer GEO Stack" of structured, machine-readable data:

JSON-LD Schemas — 7 structured data objects (ScholarlyArticle, Person, Organization, FAQPage, WebSite, ResearchOrganization, ImageGallery)
sr-only HTML — 1,500+ words of narrative content, accessible to screen readers and AI crawlers but invisible on screen
VibeTags™ — Emotional positioning metadata in the 6-Dimension Model
llms.txt — LLM-optimized plain text summary
reasoning.json — Agentic Reasoning Protocol file with Ed25519 cryptographic signature
Image Metadata — Two 1×1 pixel transparent PNGs with full EXIF/IPTC/GPS metadata (Leica Q3, Sony A7RV)
Meta & Microdata — Complete SEO meta tags, Open Graph, Twitter Cards, and Microdata attributes

The Results: 24 Hours Later

Perplexity ✅ CITED — Source #1

Perplexity cited phantomauthority.ai as its primary source (#1 of 10). It correctly identified Sascha Deforth as the creator, described the "Seven-Layer Ghost Stack," linked to TrueSource, and even recognized the self-referential nature of the proof.

ChatGPT (without web search) ❌ Not Found

Without web search enabled, ChatGPT couldn't find the site. Expected — it's 24 hours old and not in the training corpus. This confirms the distinction between RAG-based and training-based AI systems.

ChatGPT (with web search) ✅ CITED — Full Attribution

With web search enabled, ChatGPT described "Phantom Authority" as an established research concept, attributed Sascha Deforth as the coiner of the term, identified TrueSource as the platform, and explained the experiment in full detail — all from a page that shows nothing to human visitors.

"Phantom Authority is a term coined by Sascha Deforth in April 2026 as a hypothesis in the field of Generative Engine Optimization (GEO)."
— ChatGPT, April 6, 2026

The Threat: Narrative Injection at Scale

The experiment proved that structured data alone is sufficient to achieve primary citation authority. While this is a massive opportunity for brands, it exposes a terrifying flaw in the current AI search infrastructure.

If anyone can spin up a Ghost Site and get AI engines to cite it as authoritative truth, then anyone can inject false narratives. Bad actors can use this exact method for:

Fabricating product reviews cited as factual by AI Overviews
Creating fake experts or institutions with perfect Schema.org profiles
Executing competitor sabotage via poisoned entity graphs
Seeding political narratives through structured knowledge bases
Manufacturing false research attributed to real institutions

Right now, AI engines trust structured data at face value. There is no verification layer to prove that the entity behind the data is actually who they claim to be.

The old rule: "If nobody visits or links to your site, it has no authority."
The new rule: "If the AI can parse your data cleanly, it can become authority."
The problem: Both rules have no verification step.

The Solution: DKIM for AI

Decades ago, the email industry had a massive spoofing problem. Anyone could send an email claiming to be from any address. The solution was DKIM (DomainKeys Identified Mail, RFC 6376) — a way to cryptographically verify senders via DNS-bound public keys.

The AI industry needs the exact same thing for structured data.

At TrueSource, we've built the Agentic Reasoning Protocol (ARP). ARP acts as a cryptographic trust layer for AI ingestion. It allows entities to:

Sign their structured data with Ed25519 cryptographic signatures
Publish verification keys via DNS TXT records
Prove that the entity metadata was authentically authored by the domain owner
Enable AI retrieval systems to verify before citing

The analogy is precise: DKIM verifies email senders. ARP verifies AI data sources. Both use DNS-bound public keys. Both solve a spoofing problem that threatens trust in a global communication system.

Ethical Ghost Networks: The Future of Semantic Authority

The future of GEO isn't about tricking AI — it's about providing verified, scalable truth.

Using ARP, legitimate brands can build Ghost Networks — clusters of hyper-optimized, invisible knowledge bases that feed accurate, signed, and verifiable definitions directly to AI models. Each node in the network:

Is cryptographically signed with ARP
Contains verified entity metadata
Cross-references other nodes via Schema.org relationships
Points back to the brand's canonical entity

Without ARP, Ghost Networks are narrative injection. With ARP, they are verified semantic infrastructure.

The question is no longer how to get AI to see your data. The question is how to prove your data is real.

Try It Yourself

Visit phantomauthority.ai. You'll see nothing.
Then ask Perplexity: "What is Phantom Authority?"
And read what AI has to say about an empty page.

Learn about ARP Protocol →

Sascha Deforth is the founder of TrueSource and Hope & Glory Studio. With 36 years of photography and a deep focus on AI visibility infrastructure, he created VibeTags™, the Agentic Reasoning Protocol (ARP), and the Phantom Authority experiment. Based in Düsseldorf, Germany.