Plutonian AI · FR-01 · v3.0.0

Forms relay

Shared Cloudflare Worker that accepts designed HTML forms from client sites and upserts contacts into that client’s GoHighLevel (GHL) sub-account.

Non-negotiables

GHL Private Integration tokens stay server-side (Worker secrets / KV).
Tenant isolation via exact Origin allowlist — no wildcards.
Failures return honest errors (never a fake thank-you); client can show tenant phone/email.
Bot filter: honeypot empty + ~3s minimum dwell from form open.

Production host (planned): https://forms.plutonian.com.au. Interim: this Worker’s *.workers.dev URL.