Verification

Button and image captcha, leak detection, role holding.

/verification-setup creates (or uses) a quarantine role and a verification channel, hides every other channel from the quarantine role, and posts a panel. New members receive the quarantine role; roles granted to them before verification (for example by other bots) are held and restored after verification — except roles with dangerous permissions, which staff must grant again deliberately.

Image captcha challenges expire, are stored only as a keyed hash, and allow a configurable number of attempts. The panel recreates itself if deleted. Diagnostics reports channels the quarantine role can still see.