Affinity Guard 1.0.0

First release under the name Affinity Guard.

Lets WordPress install its own core security releases on sites deployed from git, by answering the automatic_updates_is_vcs_checkout filter that otherwise blocks every background update when a .git directory is found.

Install: copy affinity-guard.php into wp-content/mu-plugins/. No activation, no settings.

Defaults: enabled, minor core releases only, self updating within the 1.x line.

Configure in wp-config.php:

define( 'AFFINITY_GUARD_ENABLED', false );      // true (default) | false
define( 'AFFINITY_GUARD_UPDATES', 'major' );    // 'minor' (default) | 'major' | 'dev'
define( 'AFFINITY_GUARD_SELF_UPDATE', false );  // true (default) | false

See the README for what minor, major and dev mean, the hook API for other security tooling, and the self update safety checks. Full notes in CHANGELOG.md.