Cloudflare Turnstile — self-test (Tier B)
Our own Turnstile widget in managedmode, on our own domain, minted via the Cloudflare API. Turnstile issues a token only when it decides the client is human; we verify it server-side and record pass vs blocked for a default headless browser against the fleet’s T5P tier. Fully authorized — our own widget.
Running Cloudflare Turnstile (managed)…
Turnstile returns a pass/fail, not a score. “Blocked” here means no token was issued within the timeout (a challenge the client couldn’t clear).