done by a human and not a script. There have been some discussions here in the past about that. It's tricky because the more advanced bots are using headless

done by a human and not a script. There have been some discussions here in the past about that. It's tricky because the more advanced bots are using headless Chrome. They look and behave just like a human. To verify a human would require something that only a human could do such as a question that requires critical thinking vs. a database lookup and that brings us back to something similar to a captcha. Even that could arguably be defeated by an LLM some of the time if your site was popular enough. In the spirit of perfect being the enemy of good I think a decent balance would just be a open ended question that maybe most of the time a human could solve and less likely that a simple database lookup could not easily answer. Maybe something that has rotating data-sets. e.g. Which of the following should you not put in your mouth And then have a dozen emoji's, ${random_count} from the pool of emoji which should not be put in one's mouth. All of the emoji should have the same name to avoid programmatic determination. This might also keep people away that put scissors in their mouth.