Skip to content

Correct the docs that said beta has no captcha #249

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
adamjohnwright merged 2 commits into from
Sep 18, 2026
Merged

Correct the docs that said beta has no captcha #249

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5f5b24f
Correct the docs that said beta has no captcha
adamjohnwright Sep 18, 2026
ce5e3fa
Merge branch 'main' into feat/chat-requires-human
adamjohnwright Sep 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions deploy/beta/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,16 @@ are registered for `reactome.org`, not beta) and no Postgres — the LangGraph
checkpointer falls back to `MemorySaver`, so conversations live in memory and are
lost on restart. Chat history and the `/chat/personal` route come later.

Leaving `CLOUDFLARE_SECRET_KEY` unset makes the captcha middleware bypass itself,
which is what we want: the Turnstile site key is bound to `reactome.org`.
**Turnstile is enforced on `/chat/guest/`** since 2026-09-18, using production's
keys -- the site key now lists `beta.reactome.org` as well as `reactome.org`, so
beta no longer needs to run without one. Rotating the key in production means
rotating it here too, or beta breaks.

Leaving `CLOUDFLARE_SECRET_KEY` unset used to make the middleware bypass itself
silently. It now refuses to start instead, unless `CHAT_REQUIRES_HUMAN=0` says
deliberately that a deployment wants no human check. "There is captcha
middleware" and "the chat is gated" were previously different statements with
nothing to tell them apart.

## 1. Embeddings

Expand Down
Loading