v1.1.0

Works on activation. No constant, no wp-config.php edit, no environment check.

v1.0.0 refused to run unless wp_get_environment_type() returned something other than production. Managed hosts report production for staging and dev installs alike, so the plugin sat dead on exactly the environments it was built for — and the workaround was asking every user to edit wp-config.php.

The environment check was not protecting anything. manage_options is the real boundary: every path the panel prints is already visible to that user in the dashboard, nothing is written to the database, and ACF field values stay off unless requested per request.

Changes

• On by default, everywhere. WRT_INSPECTOR is now an opt-out: define('WRT_INSPECTOR', false);
• New wrt_inspector_enabled filter for conditional control (per environment, per user, per URL).
• Sends nocache_headers() when the gate passes, so a misconfigured full-page cache cannot store an administrator's response and serve the panel to anonymous visitors.

Upgrade by replacing the plugin folder. If you added define('WRT_INSPECTOR', true); for v1.0.0, it stays valid — it is now redundant.