Public feedback submissions now pass through additional, invisible spam checks alongside the optional captcha:

• Honeypot fields that real visitors never see or fill.
• A minimum time-to-submit check that catches automated form fills.
• A disposable-email blocklist on doc page suggestions.

These run on the public board form, the embed widget, and doc feedback. They fail open on anything ambiguous, so genuine submissions are never blocked.