UpdateProof

UpdateProof is a free local tool for safer site maintenance. Start with one simple workflow: check your site, test important pages, review the update evidence, and approve changes only when you are ready. Learn about the broader UpdateProof roadmap at https://updateproof.zerofrik.com/. The Free/Base release helps developers and maintenance agencies establish an evidence-based update workflow before an update:

• Records WordPress and PHP versions.
• Records active plugins and the active theme without collecting their source code.
• Detects available WordPress, plugin, and theme updates using WordPress native update APIs.
• Runs a small, transparent set of deterministic checks and gives a low, review-recommended, or high-risk signal.
• Lets administrators configure up to four critical same-site URLs for manual preflight checks.
• Records HTTP status, response time, and a privacy-safe HTML fingerprint before and after a deployment attempt.
• Creates a selectable plugin/theme deployment plan with an explicit approval step.
• Applies selected plugin and theme updates through WordPress native upgrader APIs.
• Records post-deployment checks and a local deployment history.
• Optionally connects to an administrator-owned browser worker for real Chromium screenshots of up to three public pages.
• Captures a baseline and reports pixel-level visual differences after an update, with screenshots stored in the site's uploads directory.
• Exposes site metadata, the latest snapshot, and update inventory through a read-only REST API.
• Lets an administrator generate and revoke a per-site API token.

The Free/Base plugin does not create a staging site, run synthetic form or WooCommerce tests, schedule updates, automatically roll back a failed update, or provide multi-site/team management. Those are planned Pro/service capabilities.

1. Upload the zerofrik-maintenance-safety-agent folder to /wp-content/plugins/, or install the plugin ZIP from Plugins > Add New > Upload Plugin.
2. Activate the plugin.
3. Open UpdateProof in the WordPress admin.
4. Run a safety check.
5. Generate a site token only if you are connecting the site to an external service.
6. Optional: configure an administrator-owned browser worker under Visual regression, save a baseline, and run a visual check.

The visual-regression screen can generate a one-time worker token. Copy it to the worker server as UPDATEPROOF_WORKER_TOKEN, restart the worker, and leave the saved token unchanged in WordPress. To rotate it later, use Generate and replace token, update the worker environment variable, restart the worker, and test again.

0.6.8

• Added an optional deactivation feedback flow with a skip path that always allows immediate deactivation.
• Added conditional feedback questions for technical issues and missing features.
• Added an optional, owner-configured backend endpoint and WordPress action hook for feedback collection.

0.6.7

• Refreshed the Free admin workspace to match the UpdateProof product UI.
• Added snapshot metric cards for WordPress, PHP, active plugins, and available updates.
• Clarified deployment planning, approval, history, and visual evidence sections.
• Improved action-button alignment and responsive layouts.

0.6.6

• Adds a visible worker connection test before baseline capture.
• Keeps the hosted visual worker health response limited to service readiness and capabilities.

0.6.5

• Adds a reusable visual-check integration point for UpdateProof Pro scheduled checks.
• Sends the saved baseline image with visual comparisons so hosted workers can run without persistent local disk.
• Keeps visual screenshots and comparison results stored locally in the WordPress uploads directory.

0.6.4

• Reworked the Site checks tab into a clearer page-testing workflow with a prominent manual preflight action and configured-page rows.
• Added a dedicated latest page-check results panel and aligned Visual regression wording with the Free dashboard.
• Improved the Site checks layout for desktop and mobile screens.

0.6.3

• Refreshed the Free admin dashboard to make the safety snapshot, risk signal, and update evidence easier to scan.
• Added clearer labels and visual hierarchy for page checks and visual regression.
• Enqueued the dashboard refresh styles as a separate versioned admin asset.

0.6.2

• Added a stable Pro approval hook so an active Pro recovery rule can block maintenance until a restore point is confirmed.
• Improved blocked-deployment notices so administrators see the actual safety reason.

0.6.1

• Added a guided setup checklist to make the first safety check easier to follow.
• Added stable extension hooks for the separate UpdateProof Pro add-on.
• Added a restrained Pro roadmap link in the Help section.

0.6.0

• Renamed the plugin to UpdateProof and requested the matching WordPress.org slug.
• Moved admin CSS and tab JavaScript into enqueued plugin assets.
• Audited request values and tightened worker-token sanitization.
• Shortened the directory submission description to meet the WordPress.org limit.

0.5.0

• Improved the release-candidate branding and WordPress.org submission metadata.

0.4.1

• Renamed the Tests tab to Site checks and added a simple recommended-check workflow.
• Added an explicit deployment workflow guide and clear empty-update states.

0.4.0

• Reorganized the admin workspace into Dashboard, Tests, Updates & deploy, Connection, and Help & limits tabs.
• Simplified administrator-facing labels and added a guided start panel.
• Added a clear Free/Base capability and limit summary.

0.3.3

• Added visible per-page baseline capture results and screenshot previews.
• Fixed alignment of visual settings and token actions.

0.3.2

• Fixed visual regression action buttons being rendered disabled even when configuration was complete.
• Added a visible visual-test readiness status and improved action-button alignment.

0.3.1

• Clarified the worker shared-secret workflow and added one-time token generation and rotation in the admin UI.

0.3.0

• Added an opt-in administrator-owned browser-worker integration for three-page Chromium visual regression.
• Added encrypted-at-rest worker token storage, local screenshot storage, visual results in the admin UI, and a read-only visual REST summary.

0.2.0

• Added configurable critical-path HTTP preflight tests.
• Added selectable plugin/theme deployment plans with explicit approval.
• Added post-deployment verification and local deployment history.
• Added read-only REST endpoints for preflight, plan, and history data.

0.1.0

• Initial free WordPress.org release candidate.