2026.07.001

First tagged release (previously unversioned-in-git; PHP said 2.1.1, package.json said 2.0.0 — now unified under the YYYY.MM.VVV scheme).

• Fixed block validation breaking on every editor reopen (dynamic timestamp in save output)
• Replaced up-to-11 ORDER BY RAND() queries per click with one prepared count + indexed-offset query
• Hardened the ?random redirect: input unslashing/type checks, nocache headers, wp_safe_redirect, admin/AJAX/cron guard, $wpdb->prepare everywhere
• Editor styles now actually load (wrong build path); Clear History link now works (nonce-protected)
• Removed dead activation/setup-notice code (net −131 lines); a11y contrast checker + fieldset/legend
• Full multi-reviewer audit + cross-model review; details in #1