KiwiCaptcha: privacy-first, self-hosted proof-of-work anti-abuse engine for PHP. Zero third-party services or tracking; optional first-party telemetry; PHP-native verification (the optional RSW time-lock algorithm uses GMP).