It publishes only if you ask
Generated posts are drafts by default, and edited posts keep the status they had. Publishing directly is a setting you can switch on.
Home / Trust and human control
What it will not do, and why that is the point
An AI that edits published work and spends money is only acceptable if you can answer three questions afterwards: what did it do, why, and what stopped it.
Limits and defaults
It never hard-deletes
Nothing is removed permanently. With stalled-draft cleanup switched on it can move its own empty failed drafts to Trash, which you can undo.
It never approves its own plan
Approval is a person in wp-admin. That is the step the whole design rests on.
It never changes your provider
A withdrawn model is replaced with the closest one from the same provider, and you are emailed. Your key, bill and contract are yours.
Recorded and reversible
A decision log per run
Each step records what was done and why, and the run records what stopped it.
Snapshots before changes
The previous state of each post is saved before it is touched. If that fails, the edit does not happen.
Granular undo
One post, a selection, or the whole run — and restoring is itself reversible, so both versions stay in your history.
Spend you can see
Every AI call logged with tokens and estimated cost, attributed to the article that caused it.
Credentials and connections
Keys are encrypted at rest
And never rendered back into a form field, because a password input still carries its value in the page.
Secrets are stripped from logs
Anything long enough to be a token is redacted before it is stored, displayed or emailed — provider errors have been known to quote account identifiers back.
Credentials travel in headers
Never in query strings, which are copied into every access and proxy log they pass through.
Assistant connections are off by default
Connecting Claude or ChatGPT to your site takes an administrator and a pairing code you issue, which is good for fifteen minutes and works once.
Questions
Can the plugin publish without me?
No. Generated posts arrive as drafts, and the refresh path never writes a post's status in either direction.
Can it delete my content?
Nothing is ever hard-deleted. The one exception is stalled-draft cleanup, which is off by default and only moves the plugin’s own empty failed drafts to Trash, where you can restore them.
Where does my content go?
To whichever AI provider you connect, using your key, from your server. We do not proxy it and we never see your key. On a provider's free tier, check their terms — Google's free tier, for example, says it may use what you send to improve its products.
What happens if my licence lapses?
Nothing is deleted, unpublished or hidden. Articles stay published, settings stay readable and exports keep working. Only the making of new work stops.
Review the controls
Three permission tiers, so someone trusted to publish is not automatically trusted to raise the budget they publish on.