Use when designing controls against spam, bots, scraping, credential attacks, fake accounts, quota abuse, fraud, harassment, or AI cost abuse.
