faucet: public web app + abuse controls (rate limits, eligibility) #234
Description
Goal
Provide a simple public faucet web app for users to request testnet funds, with guardrails against abuse.
Scope
- Minimal web UI: enter address (32-byte pubkey hex) and request funds
- Server-side controls:
- per-address / per-IP rate limits (24h caps)
- captcha / proof-of-work option
- eligibility hooks (Discord join, social post, or holding real KAT once mainnet exists)
- Observable pipeline:
- return tx_id
- show receipt status (pending/selected/applied/dropped)
- Deployment templates (Docker + reverse proxy TLS)
Acceptance criteria
- Public faucet can be used by non-technical users from the wallet UX
- Abuse controls prevent trivial draining
- Faucet service never exposes the faucet private key to clients
Refs: #220 (hosted faucet service), docs/wallet-faucet-integration-catalyst-testnet.md