Server-signed, dignity-preserving human verification. Score computed inside the Cloudflare Worker with a secret the browser never sees. No puzzles, no surveillance.
Worker: cross-origin Captchaless HMAC-SHA256 3 modes
Diagnostics use the /hv10/passive path. The embed code + preview update from your Sitekey, Endpoint, and mode.
https://hv10-dashboard.pages.dev URL, not from disk (file://) — browsers block cross-origin fetch from file pages.Developers paste this before </body>. This is the combined HV8+HV10 script: HV8 collects client-side signals and UI, the HV10 Worker signs the token server-side (unforgeable). It exposes window.HV10.verify() and window.humaneV8Run(), and auto-protects any <form data-hv8> or <form data-hv10> with a hidden hv10_token field.
No token yet.
Not checked yet.