Bots slip through. What’s the plan for addressing improved AI?

I use invisible captcha in a sign-up form:

```erb
<%= f.invisible_captcha :username, nonce: true %>
```

I do not, in fact, let people pick a username, but was hoping it would trick bots.

Some bots still make it past the honeypot, though. I’m guessing they’re becoming smart enough to ignore it.

Any known workarounds? I expect this problem to become more pressing as AI continues to improve in the near future.

The issue shows an ERB usage example for invisible_captcha and reports that bots bypass the honeypot. No source file, test, entry point, concrete workaround, or acceptance criteria is identified, so the first step would be clarifying the intended security change and defining how success will be measured.

Written by the indexing model from the issue text.