I use invisible captcha in a sign-up form:

<%= f.invisible_captcha :username, nonce: true %>

I do not, in fact, let people pick a username, but was hoping it would trick bots.

Some bots still make it past the honeypot, though. I’m guessing they’re becoming smart enough to ignore it.

Any known workarounds? I expect this problem to become more pressing as AI continues to improve in the near future.