v1.13.0

Minor release.

Features

• Opt-in privacy-safe verdict logging (#13). Set FCAPTCHA_LOG_VERDICTS=1 to log one JSON line per /api/verify and /api/score — score, recommendation, category scores, and per-hit category/score/confidence — for observability and threshold tuning. Off by default; omits IP, user agent, and raw signals. A separate FCAPTCHA_LOG_VERDICTS_INCLUDE_RAW opt-in includes free-text detection reasons (which can carry visitor-derived data). Implemented across the Node, Python, and Go servers.

Improvements

• Go server is now go install-able (#14): module renamed to github.com/WebDecoy/FCaptcha/server-go, so go install github.com/WebDecoy/FCaptcha/server-go@latest works and the module resolves on pkg.go.dev.
• Go stdlib logs routed to stdout so routine startup/warning lines are no longer misclassified as errors by platforms that treat stderr as error-level.

Docs

• Documented AI-agent detection, input-event forensics, and TLS/mobile signals (#11); removed stale internal PRD links (#12).

npm: @webdecoy/[email protected]