blog
notes on captcha, agent traffic, and what an honest signup signal looks like.
building a browser agent indistinguishable from humans: the end-to-end flow
We built a Playwright-based browser agent with human behavior shims — Bezier mouse curves, typing variance, typo injection — and wired its behavioral traces into the same labeled store that powers our captcha infrastructure. Here's the full end-to-end flow with screenshots, architecture diagrams, and raw trace data.
captcha that produces signal: why pass/fail isn't enough
Traditional captcha returns a single bit — human or not. That bit hides everything operators actually need to make a routing decision. Here's what a signal-producing gate looks like instead.
letting AI agents through your signup without getting overrun: a threat model
AI agents will sign up for your product on behalf of paying humans whether you let them or not. Here's the threat model for admitting them deliberately instead of blocking them by accident.
reCAPTCHA v3 / Turnstile / hCaptcha / panel: what each actually measures
Four captcha-replacement systems, compared on what they actually measure, what they emit, and what operators can do with the output. No marketing summary — the underlying signal.