Server-signed, dignity-preserving human verification. The score is computed inside the Cloudflare Worker with a secret the browser never sees, so tokens cannot be forged. No puzzles, no surveillance.
Worker: cross-origin Captchaless HMAC-SHA256 Passive mode
Admin actions configure the verification run and test the trust anchor. Diagnostics use the /hv10/passive path (requires ~2s page dwell).
No token yet.
Not checked yet.