One script tag embeds the widget. Everything in the box runs in an Argus-origin iframe; this page only receives the result message and forwards the token to its server for verify.
waiting for events…