Maniphest T410992

hCaptcha: Record risk score for failed edits
Open, In Progress, Needs TriagePublic
Actions

Description

Summary

In T405597: hCaptcha: Update instrumentation for risk score we added support for logging the risk score for saved edits. In this task, we should also record the score for edits that failed (e.g. blocked by AbuseFilter).

Technical notes

We can potentially use onEditPage__attemptSave_after to look at the $status object. Ideally we'd want to be able to access the AbuseFilter log ID (or other mechanism involved in blocking the edit).

We'll need to update the schema and also add some code in WikimediaEvents for this logging.

Acceptance criteria

Risk scores for edits that do not save are logged in a way that allows us to identify why the edit was blocked

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	hCaptcha: log risk score for failed edits	mediawiki/extensions/WikimediaEvents	master	+449 -36

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		In Progress		hector.arroyo	T410992 hCaptcha: Record risk score for failed edits
		Resolved		hector.arroyo	T415101 hCaptcha: Store the ID of the filter that triggered the captcha consequence in the user session

Event Timeline

kostajh created this task.Nov 25 2025, 9:27 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptNov 25 2025, 9:27 AM

kostajh moved this task from Backlog to Ready on the WE4.2 Bot detection (WE4.2 hCaptcha editing trial) board.Nov 25 2025, 12:47 PM

kostajh moved this task from Backlog to Ready on the Product Safety and Integrity (Crepes au Chocolat (Sprint Nov 10 - Nov 28)) board.

kostajh added a project: MediaWiki-extensions-WikimediaEvents.

• sguebo_WMF updated Other Assignee, added: • sguebo_WMF.Nov 25 2025, 8:49 PM

Change #1211330 had a related patch set uploaded (by Samuel (WMF); author: Samuel (WMF)):

[mediawiki/extensions/WikimediaEvents@master] hCaptcha: Record risk score for failed edits

https://gerrit.wikimedia.org/r/1211330

gerritbot added a project: Patch-For-Review.Nov 26 2025, 4:18 AM

sguebo opened https://gitlab.wikimedia.org/repos/data-engineering/schemas-event-secondary/-/merge_requests/98

hCaptcha: add field in risk score for failed edits

kostajh assigned this task to • sguebo_WMF.Nov 26 2025, 12:43 PM

kostajh moved this task from Ready to In progress on the WE4.2 Bot detection (WE4.2 hCaptcha editing trial) board.

kostajh updated Other Assignee, removed: • sguebo_WMF.

kostajh moved this task from Ready to In progress on the Product Safety and Integrity (Crepes au Chocolat (Sprint Nov 10 - Nov 28)) board.Nov 27 2025, 12:51 PM

OKryva-WMF edited projects, added Product Safety and Integrity (Sprint Mince Pie Dec 1 - Dec 12); removed Product Safety and Integrity (Crepes au Chocolat (Sprint Nov 10 - Nov 28)).Dec 1 2025, 9:05 AM

OKryva-WMF moved this task from Backlog to In progress on the Product Safety and Integrity (Sprint Mince Pie Dec 1 - Dec 12) board.Dec 1 2025, 9:06 AM

kostajh moved this task from In progress to Needs review on the Product Safety and Integrity (Sprint Mince Pie Dec 1 - Dec 12) board.Dec 2 2025, 12:50 PM

OKryva-WMF moved this task from Needs review to In progress on the Product Safety and Integrity (Sprint Mince Pie Dec 1 - Dec 12) board.Dec 17 2025, 12:47 PM

OKryva-WMF edited projects, added Product Safety and Integrity (Sprint Daffodil (Jan 19 - Feb 6)); removed Product Safety and Integrity (Sprint Mince Pie Dec 1 - Dec 12).Dec 19 2025, 9:23 AM

OKryva-WMF moved this task from Backlog to In progress on the Product Safety and Integrity (Sprint Daffodil (Jan 19 - Feb 6)) board.Dec 19 2025, 9:25 AM

kostajh reassigned this task from • sguebo_WMF to hector.arroyo.Jan 20 2026, 12:49 PM

kostajh added a subscriber: • sguebo_WMF.

hector.arroyo mentioned this in T415101: hCaptcha: Store the ID of the filter that triggered the captcha consequence in the user session.Jan 20 2026, 5:33 PM

hector.arroyo added a subtask: T415101: hCaptcha: Store the ID of the filter that triggered the captcha consequence in the user session.

hector.arroyo changed the task status from Open to In Progress.Jan 20 2026, 6:09 PM

hector.arroyo changed the status of subtask T415101: hCaptcha: Store the ID of the filter that triggered the captcha consequence in the user session from Open to In Progress.

The implementation in https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WikimediaEvents/+/1211330 is now ready for review, but CI tests seem to be failing due to a change introduced somewhere else (doing an empty commit in the WikimediaEvents repository is currently failing the CI checks: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WikimediaEvents/+/1229618).

EDIT: The error was caused by a method rename that missed to update a caller, this patch https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WikimediaEvents/+/1229623 fixed it and tests are now passing again: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WikimediaEvents/+/1229618?tab=checks

hector.arroyo moved this task from In progress to Needs review on the Product Safety and Integrity (Sprint Daffodil (Jan 19 - Feb 6)) board.Jan 22 2026, 11:32 AM

Change #1211330 merged by jenkins-bot:

[mediawiki/extensions/WikimediaEvents@master] hCaptcha: log risk score for failed edits

https://gerrit.wikimedia.org/r/1211330

ReleaseTaggerBot added a project: MW-1.46-notes (1.46.0-wmf.13; 2026-01-27).Jan 26 2026, 9:00 PM

Patches for this task have been merged, so moving this to QA.

hector.arroyo closed subtask T415101: hCaptcha: Store the ID of the filter that triggered the captcha consequence in the user session as Resolved.Jan 27 2026, 9:43 AM

OKryva-WMF edited projects, added Product Safety and Integrity (Sprint Flower (Feb 9 - Feb 27)); removed Product Safety and Integrity (Sprint Daffodil (Jan 19 - Feb 6)).Feb 10 2026, 8:28 AM

OKryva-WMF moved this task from Backlog to Needs QA on the Product Safety and Integrity (Sprint Flower (Feb 9 - Feb 27)) board.Feb 10 2026, 8:29 AM

hector.arroyo moved this task from In progress to QA on the WE4.2 Bot detection (WE4.2 hCaptcha editing trial) board.Wed, Feb 18, 9:00 AM

OKryva-WMF edited projects, added Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)); removed Product Safety and Integrity (Sprint Flower (Feb 9 - Feb 27)).Mon, Mar 2, 4:18 PM

OKryva-WMF moved this task from Backlog to Needs QA on the Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)) board.Mon, Mar 2, 4:19 PM