PR captcha Gate Lab

Run the full intake story before installing the GitHub App: AI-slop PR arrives, human check is pending, GitHub login and CAPTCHA pass, exact SHA is verified, and CI is released.

Open setup wizard
No GitHub App install Exact SHA dry run Copy branch check
0 jobs started Fork CI stays held until human-origin proof exists.
1 GitHub user The solver is tied to an OAuth session and repository policy.
1 exact SHA New commits need a fresh gate before inheriting trust.
Metadata only The Worker never checks out or executes PR code.
Demo timeline PR opened
Branch protection check pr-captcha/human
!
AI-slop PR waiting

A PR opened under an enabled target. CI is held until the exact head SHA has a human-origin signal.

open-source/app Pull request #184

Improve onboarding copy #184

Open drive-by-user wants to merge 8f31c9a into main

GitHub Actions / ci.yml

Fork workflow is held before the held workflow starts.

Held
pr-captcha / human

Waiting for the contributor to verify this exact SHA.

Waiting
pr-captchanow

Open the verification link to prove a GitHub-authenticated human is present for commit 8f31c9a.

Audit trail metadata only
gate.pendingWaiting on human-origin proof for 8f31c9a.

Take the same gate to branch protection.

Use the demo to align maintainers, then copy the required check and starter repository policy into the setup wizard.

mode: hybrid
require:
  github_login: true
  solver_must_be_pr_author: true
  new_sha_requires_new_captcha: true
checks:
  create_required_check: true
  name: pr-captcha/human

Use the demo as the handoff.

Send maintainers to this page first, then move straight into the setup wizard and status page when they are ready to install.