@adamrbrown: That's actually funny about the 403's...your bot probably triggered an anti-bot security measure we have installed on our sites. I contacted you on your contact form so you can email me back at that address and we can get in touch. No worries about being swamped. I totally understand that one. Whenever you have a chance is fine. In the mean time, I'll be working on the next set of features.
No problem at all...the only reason for confidence is results. You're probably familiar with the fact security or any similar concept there is never 100% security, but rather risk reduction and decreasing likelihood of a successful attack. Stopping spam basically works the same way, and WP-SpamFree is a practical solution that drastically decreases the likelihood of an automated comment spam getting through. I haven't had any reports yet of bots beating in everyday implementation, although I'd like it if people would report that so I could make it even better.
I look forward to your email and actually really appreciate your proof of concept post because it gives me the opportunity make WP-SpamFree better. :) Full credit will be given for any contributions you make.
@jonlandrum: Thanks for your comment. That's exactly the intent! To be a front-end filter for obvious spam. I'll definitely keep you guys posted on future progress.