A timed-out AI action may already have succeeded. Stable keys, durable ledgers, queues and stored results prevent a routine retry from duplicating real work.
A Turnstile widget is only the front end: secure lead forms also need server-side token checks, replay handling, hostname controls, secret rotation, and analytics.
