WooCommerce 2.5.8

• Fixed: the "Client types" labels in the Spanish panel read "Tipos de Client" (a mixed-language leftover); they now say "Tipos de cliente".
• Fixed: the "ChatGPT / OpenAI" client type description in the Spanish panel read as if a word was missing; it now says "los GPT creados con ChatGPT y Codex".
• Added: the agent-readiness panel names the new "merchant decision" probe result ("Your choice" / "Decisión tuya") instead of showing it as an unrecognised state.

WooCommerce 2.5.7

• Fix: the idempotency lock on order creation is now atomic, so two simultaneous requests with the same payment reference can no longer both create an order, and a fatal PHP error no longer leaves the lock held for 120 seconds.
• Security: agent tokens without a merchant identifier are now rejected, as in the PrestaShop and Odoo integrations. Conforming agents always send it.
• Fix: product changes are synced after WooCommerce has saved the price and stock, and the call to Trusteed runs in a background task instead of slowing down the save.
• Fix: when you connect with a dashboard key, the plugin now stores the plugin key that Trusteed issues in exchange, instead of keeping the dashboard key.

Trusteed Agentic Commerce for WooCommerce 2.5.6

Trusteed Agentic Commerce for WooCommerce 2.5.6

Install: WP Admin > Plugins > Add New > Upload Plugin and select trusteed-agentic-commerce-woocommerce-2.5.6.zip.

2.5.6

• Fix: My rules always shows a rule that is switched on, even when it is only partly enforced on WooCommerce (for example "approval required"). Before, such a rule stayed active but hidden: it could not be seen or switched off, and the counter showed one rule less.
• Fix: Payment methods. With PayPal connected, the credential fields are folded behind "Change credentials" instead of showing empty fields under "Connected". KYApay is named and described correctly in every language: it verifies agent identity and does not charge (the old text described a buy-now-pay-later service).
• Fix: the plugin description in the WordPress plugin list is translated, and the email example on the connect form is a generic address.

Trusteed Agentic Commerce for WooCommerce 2.5.5

Trusteed Agentic Commerce for WooCommerce 2.5.5

Install: WP Admin > Plugins > Add New > Upload Plugin and select trusteed-agentic-commerce-woocommerce-2.5.5.zip.

2.5.5

• Fix: "Test connection" no longer shows "Request error" while Trusteed is serving normally with a non-critical check degraded. A real outage now shows a plain message instead of status codes.
• Fix: the MCP endpoint shown after connecting (and published in your llms.txt) is the current discovery endpoint on api.trusteed.xyz, not the retired one. Reconnect, or use "Sync catalog now", to refresh the saved value; the llms.txt already publishes the current endpoint after the update.
• Fix: the "enforcement is not configured" notice no longer appears before the store is connected; the connect form is the next step.
• Changed: the checkout protection settings are written for merchants (no internal names, metrics or server variables).

Trusteed Agentic Commerce for WooCommerce 2.5.4

Trusteed Agentic Commerce for WooCommerce 2.5.4

Install: WP Admin > Plugins > Add New > Upload Plugin and select trusteed-agentic-commerce-woocommerce-2.5.4.zip.

2.5.4

• Fix: the Home card "Agents" no longer says "No agents" when guest agents exist; it now counts guest agents too, and it no longer adds up a number labelled "calls" that only meant "new in the last 30 days". The Agents list now shows "New in the last 30 days" instead of "N purchases".
• Fix: "Latest sales to agents" on Home was empty when the purchases came through Trusteed without an agent key; it now uses the same rule as the sales summary. "View receipt" now works: it opens that receipt in Sales > AI sales.
• Fix: Trust panel. "Calculated on" shows when the score was calculated (it showed the time of the page load). Orders are labelled "with / without an identified agent" instead of "from humans". Returns and shipping are shown as done, missing, or "We could not check it on your store" (neutral, not counted) instead of a green tick when the store could not be read. The button that creates your signing key is now called "Activate my protection".
• Fix: Rules. Unticking a box now sends an explicit "off"; before, the field was erased and the rule's default (often "on") kept applying. Rule descriptions that said "we review" or "we wait" now say what activating does: the order is blocked. The provisional-list notice no longer promises that changes will be saved later.
• Fix: Settings > General. On WooCommerce the "failure mode" selector (which did not control checkout) is replaced by a link to WooCommerce > Trusteed, where the real setting lives.
• Fix: texts that promised more than the product does: receipts no longer claim a time-stamp from a third party (they carry Trusteed's signature and issue time), the keys screen no longer says "change them every 90 days" without a button, "Watch" on an agent is described as a note for you that does not restrict purchases, and the payment-order notice no longer says you choose the order there.
• Fix: dates in Orders, AI sales, Keys and other screens follow the panel language (they were always Spanish). The receipts "learn more" link follows the panel language too.
• New: when the store is not connected yet, the panel shows "Connect your store first" with a link to WooCommerce > Trusteed instead of a wall of "could not load" cards.
• Fix: the password field on the connect form now states the real requirement for new accounts (at least 10 characters with upper and lower case letters, numbers and symbols).

Trusteed Agentic Commerce for WooCommerce 2.5.3

Trusteed Agentic Commerce for WooCommerce 2.5.3

Install: WP Admin > Plugins > Add New > Upload Plugin and select trusteed-agentic-commerce-woocommerce-2.5.3.zip.

2.5.3

• New: the plugin now answers /llms.txt on your site (only when that address does not exist yet) and adds a link to it in the page header. It points AI agents to your store's MCP endpoint and tells them that buying through the website's own buttons carries no verifiable agent identity. It is plain public text, it changes no checkout behaviour, and it does nothing until the store is connected to Trusteed.
• New: when an agent order is created and still waits for payment, the agent orders endpoint now also returns payment_url, the WooCommerce pay-for-order link, so a person can pay it with your own payment methods. It is only returned while the order is Pending payment, and it is never used to take payment on the agent's behalf.

v2.5.2

Trusteed Agentic Commerce for WooCommerce 2.5.2

Install: WP Admin > Plugins > Add New > Upload Plugin and select trusteed-agentic-commerce-woocommerce-2.5.2.zip.

2.5.2

• New: browser agents that sign their requests with RFC 9421 HTTP Message Signatures are now recognised at checkout, according to the browser_agent_signature_mode setting.
• Changed: when your store's rules block an order that an agent placed through Trusteed, the plugin now tells Trusteed why (reason_category, rule_code, reason, next_action on the 422 rule_blocked answer), so the agent knows what to do next instead of getting a bare refusal. With an older Trusteed server the plugin derives a generic reason itself and marks it with reason_source: plugin_fallback. An error that is not a rule block no longer answers as rule_blocked (it uses order_invalid).
• Changed: the same answer can also carry what caused the block when Trusteed knows it: blocked_item, published_limit and human_checkout. Each key is checked on its own and dropped if it does not look right.

2.5.1

• Fixed: when a store requires a verified agent identity, orders that Trusteed creates for a verified agent are no longer blocked by the plugin's own second check. Update the plugin before turning that rule option on.

v2.5.0

Trusteed Agentic Commerce for WooCommerce 2.5.0

Install: WP Admin > Plugins > Add New > Upload Plugin and select trusteed-agentic-commerce-woocommerce-2.5.0.zip.

Behaviour change in 2.5.0. An agent order is only marked as paid once your own payment provider confirms the charge. Orders it cannot confirm stay On hold: review agent orders in WooCommerce > Orders before shipping.

2.5.0

• Changed: an agent order is no longer marked as paid unless the payment provider confirms the charge. The plugin checks the payment (Stripe PaymentIntent or PayPal capture) with the credentials of your own account; if it cannot confirm it, the order stays On hold and the agent orders endpoint answers 409 payment_not_verified (definitive) or 503 payment_verification_unavailable (provider unreachable or no credentials; Trusteed retries). If the charge was made on a Trusteed demo account instead of your own, it will not be confirmed by design.
• Fixed: two concurrent payment confirmations for the same charge can no longer both go through.

2.4.9

• Fixed: variable products now send their variations (price, stock and attributes) with the catalog sync. Run "Sync catalog" once after updating so existing products pick them up.

2.4.8

• New: the hourly heartbeat also sends the link, title and last-modified date of your published Terms and Privacy Policy pages. The page content is never sent.

2.4.7

• New: orders paid through PayPal can be marked as paid on your store (payment_method = paypal with the PayPal capture reference). Stripe payments are unchanged.

2.4.6

• New: "Use my WooCommerce PayPal account" in the Payment methods panel. The credentials already set in WooCommerce PayPal Payments are sent to Trusteed by your site (never through the browser) and kept in sync. Payments go to your own PayPal account. Opt-in.

2.4.5

• New: "Use my WooCommerce Stripe account" in the Payment methods panel. The Stripe key already set in the WooCommerce Stripe plugin is sent to Trusteed by your site (never through the browser) and kept in sync. Opt-in.
• New: purchases paused for your approval show up under My sales, and a notice on Home tells you when one is waiting.

v2.4.4

Trusteed Agentic Commerce for WooCommerce 2.4.4

Install: WP Admin > Plugins > Add New > Upload Plugin and select trusteed-agentic-commerce-woocommerce-2.4.4.zip.

2.4.4

• Fixed: the capabilities report no longer includes cart signals that no rule reads. The Trusteed API rejected the whole report (HTTP 400), so the rules checks in the dashboard stayed without a verdict.
• Fixed: a rejected capabilities report is retried after one hour instead of on every page load.
• Changed (My sales): an order placed by an AI agent now shows the agent and the client it declared (for example ChatGPT or Claude), the channel and payment method (for example "Agent · MCP · x402"), and the real total. It used to show "Other channel", "Person" and "0.00 USD". The order number opens the signed Trust Receipt of the purchase. Requires the matching Trusteed API update.
• Changed (Security log): an entry without an agent id is no longer labelled "Person"; tool calls are labelled as agent activity.
• Changed (Agent readiness): a check without a verdict now says why (needs a setting, waiting for data, does not apply, we will retry) instead of "Not checked"; checks that do not apply are counted apart. The three panels are stacked full width and wide tables no longer overflow their card.

2.4.3

• New: the hourly heartbeat also reports your tax display settings (prices entered with or without tax, and how the shop shows them), so Trusteed can tell whether the catalog price and the price an agent sees are comparable. No customer data.

2.4.2

• New: the plugin reports which cart signals it provides to Trusteed (POST /api/v1/enforcement/capabilities, signed with the installation secret) on update, after saving credentials and once a day.
• New: an hourly heartbeat (WP-Cron) tells Trusteed the plugin is alive, so a quiet store is no longer reported as out of date.
• New: when an order is marked Completed, the plugin sends an order.completed event (no customer data) so Trusteed can compare your shipping promise with real fulfilment times. Requires a connection made with 2.4.1 or later.

v2.4.1

Conectar la tienda ahora guarda las credenciales de seguridad, y reconectar funciona.

• Corregido: al conectar la tienda, el plugin descartaba el identificador y el secreto de instalación y el secreto del webhook de WooCommerce que Trusteed le enviaba. Sin ellos, todo lo firmado con ese secreto se rechazaba (reglas, eventos de agente y los endpoints trusteed/v1/*). Las tiendas conectadas con una versión anterior deben reconectar una vez.
• Corregido: reconectar una tienda ya registrada no hacía nada. Trusteed pide probar el control del dominio y ahora el plugin lo responde solo, publicando un token de un solo uso en /.well-known/amcp-verify.txt durante un máximo de diez minutos (no escribe ningún fichero).
• Corregido: el sync de catálogo lo rechazaba la API (HTTP 400) en tiendas con categorías de producto. Los productos sin control de stock ya no envían una cantidad nula.
• Incluye 2.4.0: pasarela «Trusteed (agente)» y endpoints /wp-json/trusteed/v1/ (quote, orders, orders/{id}/paid) para pedidos creados por un agente. Desactivado por defecto.
• Problema conocido: el botón «Sync» de los ajustes solo refresca el registro de la tienda, no empuja el catálogo completo.