SafeHouse 0.3.0

• Bot protection: rotating trap names and signed, one-use browser/form/post-bound challenges, fetched outside page caches, valid for 20 minutes with a one-second minimum age. Atomic consumption prevents replay; bounded database pools keep forms separate and reject temporarily if storage or capacity is unavailable.

• Fixed ten-minute browser and reliable-IP budgets limit challenge issuance and submissions, with IPv6 grouped by /64. Automated browsers can still pass within the limits; distributed clients and cookie resets without a reliable IP remain limitations. Added accessible retry handling and Polish limit/unavailability messages.

• Form UX: visible verification progress, connection-specific errors, accurate retry countdowns and recovery after resetting a form during verification. Fields and submit-button values stay intact; retry timing follows the actual quota window.

• Hardening: independent XML-RPC pingback blocking even with Jetpack/WooPayments, plus opt-in reduction of REST/RSD/Writer/shortlink discovery metadata. REST endpoints and asset cache busting remain available.

• Added adversarial honeypot, real-browser cache/retry and hardening integration regressions. Purge HTML and asset caches when upgrading the honeypot protocol.

• Stability module: bounded local PHP incident observations, temporary HTTP timing samples, read-only WP-Cron/Action Scheduler diagnostics, Site Health and WP-CLI controls. No automatic third-party plugin deactivation or job cancellation.

• Cooperative time/memory budgets and one worker per site for SafeHouse delivery. Five failed attempts pause retained jobs for explicit review and resumption. Alert and Cloudflare transport no longer runs inline in ordinary requests.

• Targeted privilege-change checks and resumable full inventory reconciliation preserve immediate grant/revoke alerts without enumerating every account per user change.

• Added failure, resource-budget, concurrency, privacy and lifecycle regressions plus Polish translations.

• Release gates now exercise real ZIP installation, upgrade and removal on current and minimum supported WordPress/PHP, real WooCommerce Action Scheduler diagnostics and alert retry, and isolated PHP-FPM termination/recovery and CLI cron exclusion/deadline checks. Documented the separate hosting controls and target-site staging checks.

Signed release: manifest.json carries the SHA-256 of the zip and is signed with the SafeHouse release key (manifest.json.sig, Ed25519; public key in PUBLIC_KEYS, plugin/src/Core/Updater.php). Sites update from https://updates.designhouse.me/shouse/ and install only packages that pass both checks.

SafeHouse 0.2.1

• Canonical account limits, early password-check rejection, application-password lock stability, strict proxy CIDRs and operation-scoped Turnstile checks.
• Metadata and taxonomy authorization when duplicating content.
• Durable alert/purge queues, retries and Site Health status; monitoring of stored sensitive capabilities, custom roles and direct user grants.
• Redis recovery generations, isolated user/role state, unambiguous namespaces, multisite runtime separation and atomic signed counters.
• Cache lifecycle fixes and conservative invalidation for old URLs, terms, prices and listings.
• Observed price history only: unavailable/partial states, complete windows beyond 1000 changes, long-reduction retention, zero prices and visible storage failures. Migration begins a new trusted observation period.
• Atomic signed release/advisory envelopes, expiry and persistent anti-rollback floors, private size-limited downloads and conditional immutable publication. See dev/SIGNED-DATA-PROTOCOL.txt for rollout and renewal.
• Isolated digest-pinned signer, security release gates, local-only dev ports, random dev credentials and strict SMTP encryption validation.

Signed release: manifest.json carries the SHA-256 of the zip and is signed with the SafeHouse release key (manifest.json.sig, Ed25519; public key in PUBLIC_KEYS, plugin/src/Core/Updater.php). Sites update from https://updates.designhouse.me/shouse/ and install only packages that pass both checks.

SafeHouse 0.2.0

• Omnibus price history for WooCommerce, on by default: every price change of products and variations is recorded, and the lowest price from the 30 days before a reduction is shown next to reduced prices on product pages, in lists and for the picked variation. A product already reduced when recording starts shows its regular price there until its price next changes. wp shouse omnibus status lists reduced products and where each figure comes from.
• Renamed from WPHouse to SafeHouse. The plugin folder and file, the WP-CLI command, the wp-config.php constants and everything stored in the database now use the shouse prefix (shouse/shouse.php, wp shouse, SHOUSE_*).
• Moving an existing site: activate shouse. Settings, the activity log, login limits and scheduled checks move over on their own. WPHOUSE_* constants and the wphouse-safe-mode file keep working, so wp-config.php can be updated later. With the Redis object cache on, run wp shouse object-cache enable once to install the new loader; until then WordPress uses its own cache.

Signed release: manifest.json carries the SHA-256 of the zip and is signed with the SafeHouse release key (manifest.json.sig, Ed25519; public key in PUBLIC_KEYS, plugin/src/Core/Updater.php). Sites update from https://updates.designhouse.me/shouse/ and install only packages that pass both checks.