diff --git a/dist/newsletter/index.html b/dist/newsletter/index.html
index 5b91f35..cee79f6 100644
--- a/dist/newsletter/index.html
+++ b/dist/newsletter/index.html
@@ -85,22 +85,27 @@
           this.error = '';
           this.ok = false;
           this.loading = true;
+          const token = () => this.$el.querySelector('[name=cf-turnstile-response]')?.value;
+          for (let i = 0; i < 50 && !token(); i++) await new Promise((r) => setTimeout(r, 100));
           try {
             const res = await fetch('https://newsletter.planetrenox.com/api/sub', {
               method: 'POST',
               headers: { 'Content-Type': 'application/json' },
-              body: JSON.stringify({ pool: 'apophenia', email: this.email })
+              body: JSON.stringify({ pool: 'apophenia', email: this.email, token: token() || '' })
             });
             const data = await res.json();
             if (res.ok && data.ok) {
               this.ok = true;
               this.email = '';
             } else {
-              this.error = data.error === 'invalid email' ? 'That email doesn\'t look right.' : 'Something went wrong. Please try again.';
+              this.error = data.error === 'invalid email' ? 'That email doesn\'t look right.'
+                : data.error === 'captcha failed' ? 'Couldn\'t verify you\'re human. Please try again.'
+                : 'Something went wrong. Please try again.';
             }
           } catch (e) {
             this.error = 'Network error. Please try again.';
           }
+          window.turnstile?.reset();
           this.loading = false;
         }
       }"
@@ -126,6 +131,7 @@
           <i data-lucide="arrow-right" class="h-4 w-4"></i>
         </button>
       </div>
+      <div class="cf-turnstile mt-3" data-sitekey="0x4AAAAAAFG4HWETOcDDQ5vg" data-appearance="interaction-only" data-size="flexible"></div>
 
       <p x-show="ok" x-cloak class="mt-4 inline-flex items-center gap-2 text-sm font-medium text-emerald-700">
         <i data-lucide="check-circle" class="h-4 w-4"></i>
@@ -138,6 +144,7 @@
 
       <p class="mt-4 text-xs text-zinc-500">Unsubscribe anytime. We never share your email.</p>
     </form>
+    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
   </article>
 
   
diff --git a/dist/rss.xml b/dist/rss.xml
index b338f32..e5f54ba 100644
--- a/dist/rss.xml
+++ b/dist/rss.xml
@@ -5,7 +5,7 @@
   <link>https://apophenia.news/</link>
   <description>Signals, anomalies, civilization trajectories, and deep pattern analysis.</description>
   <language>en-us</language>
-  <lastBuildDate>Wed, 23 Sep 2026 20:33:19 GMT</lastBuildDate>
+  <lastBuildDate>Mon, 28 Sep 2026 14:08:39 GMT</lastBuildDate>
   <item>
   <title>My Theory of Everything</title>
   <link>https://apophenia.news/my-theory-of-everything/</link>
diff --git a/dist/sitemap.xml b/dist/sitemap.xml
index 0eaba0a..6a002f8 100644
--- a/dist/sitemap.xml
+++ b/dist/sitemap.xml
@@ -2,19 +2,19 @@
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
   <url>
     <loc>https://apophenia.news/</loc>
-    <lastmod>2026-09-23</lastmod>
+    <lastmod>2026-09-28</lastmod>
   </url>
   <url>
     <loc>https://apophenia.news/newsletter/</loc>
-    <lastmod>2026-09-23</lastmod>
+    <lastmod>2026-09-28</lastmod>
   </url>
   <url>
     <loc>https://apophenia.news/write/</loc>
-    <lastmod>2026-09-23</lastmod>
+    <lastmod>2026-09-28</lastmod>
   </url>
   <url>
     <loc>https://apophenia.news/author/renox/</loc>
-    <lastmod>2026-09-23</lastmod>
+    <lastmod>2026-09-28</lastmod>
   </url>
   <url>
     <loc>https://apophenia.news/my-theory-of-everything/</loc>