Proposal for every request from bots to be signed by a private key owned by its provider. This way, every origin can validate the service identity.
By chatting or signing in you agree to the Terms and chat-message logging (revocable in History).