Turnstile Managed widget managed pre-clearance: interactive ephemeral IDs: on
siteverify server-side. This is the baseline pattern.
?key=alwaysPass, ?key=alwaysBlock, or ?key=forceInteractive to any page URL to swap in a Cloudflare test key. Great for showing "watch what happens if a bot tries this" without needing to actually be a bot.