[technion]

To prompt a discussion that's purely technical: I'm interested in how this was done.

Specifically, Turnstile as far as I'm aware doesn't do anything specifically configurable or site specific. It works on sites that don't run React, and the cookie OpenAI-Sentinel-Turnstile-Token is not a CF cookie.

Did OpenAI somehow do something on their own API that uses data from Turnstile?

[XYen0n]

Cloudflare should be able to determine whether a website uses React by analyzing data flowing through its CDN.

[technion]

Whilst true, "validate the right state is loaded" would surely be something not done without developer input.

[kristjansson]

If your CF bill reached into 8 figures, you might ask them to accept some developer input?