Safety

The agent writes inside the frame. You decide what leaves it.

After activate, draft-only is on. Publish, future, and private are rejected unless you are on Pro and “Allow publish” is on.

• Lite cannot delete. Pro delete = trash. No force-delete in v1.
• Dangerous abilities stay unexposed until Settings → Tools.
• Every mutate: current_user_can → license flag → policy toggle → snapshot → execute → audit.
• 60 MCP calls / minute / user, filterable.

Rollback

wp-adapter/rollback restores post_title, post_content, post_excerpt, post_status, post_name, taxonomies, _thumbnail_id, and meta keys prefixed wp_adapter_. It does not blindly restore all post meta — ACF internals stay untouched in v1.

Never

No ability may call eval, install plugins, edit theme PHP, or run SQL.