Proof of work acts as a ticket system that is turned off by default, but adapts to network stress by creating a priority queue. Before accessing an onion service, a small puzzle must be solved, proving that some "work" has been done by the client.1
It uses a clever difficulty escalation as stress increases. Theoretically it'll deter attacks well enough that clients don't have to do much PoW.
Footnotes