Claude Opus 4.8 one-shotted it... I think we should gear these systems towards making the cost of abuse expensive as they will be able to get around these things more and more easily.

It's just a concept, not a real test.

Captcha are already expensive at scale due to escalating checks when abuse is detected. You have to orchestrate and pay for residential proxies, containers with different fingerprints, different behavioural data, clean IP rep, emulate device performance to avoid revealing youre running on a server... A 1-shot doesn't scale against this.

unless it has video input, i wonder if something based on animation and timing would work, as screenshots wouldn't clearly capture motion and response time would be too slow as well

So, a paywall is the simple solution