SmartCaptcha verifier security invariants: pass