Bots optimize for mathematical efficiency. Given a goal, they calculate the absolute shortest path. Humans possess biological curiosity and kinematic inefficiency. If you present a human with a reactive physics object, they will involuntarily play—generating loops, wiggles, and imperfect corrections. By measuring joy, we identify humanity.
This interaction acts as a cryptographic Proof-of-Work for human biology. The user is forced to expend physical energy and react to the chaotic physics of a bouncing ball. Generating a kinematic trajectory array that perfectly syncs with this random visual-motor task is virtually impossible for an algorithm to spoof without simulating human anatomical joints, blood-flow tremors, and cognitive latency.
In a production environment, the JavaScript client does not verify the user. Instead, it securely buffers the X/Y coordinate streams, velocity vectors, and timestamps into an encrypted payload. The server then replays the identical pinball simulation. If the server-side ball successfully breaks the blocks using the exact provided biological stream, a secure JWT is issued.