How Autvy Works Behind the Scenes

An autonomous reliability supervisor engineered directly into the WordPress execution pipeline. No slow cloud staging clones, no destructive database overwrites.

Get a place Read Cryptographic Security Specs

PILLAR 01 // ISOLATION

Ephemeral Shadow Sandbox

Instead of slow multi-gigabyte cloud staging environments that take 20 minutes to spin up, Autvy creates an instant local sandbox directly on your server using filesystem hard-links and Copy-on-Write (CoW).

✓ Sandbox path: wp-content/.autvy/shadow/{hash}
✓ Background CPU limit: nice -n 10 / cgroups
✓ Ephemeral DB tables: autvy_tmp_* (Zero live DB touch)

TERMINAL // SHADOW_SPAWNREADY (92ms)

$ autvy-worker spawn-shadow --target=woocommerce-gateway-stripe

[00:00.012] Created CoW tree: wp-content/.autvy/shadow/8f2a1d

[00:00.038] Cloned schema with temporary prefix autvy_tmp_8f2a

[00:00.065] Injected test payload: simulate_order_intent()

[00:00.092] Sandbox verified healthy. Proceeding to visual diff.

PILLAR 02 // DETECTION

Sub-Second Error Triage (<24ms)

Autvy operates as a Must-Use plugin (mu-plugin) loading before any standard plugin or theme code. It pre-allocates an emergency 512KB heap reserve to handle catastrophic out-of-memory states.

✓ Early register_shutdown_function() hook
✓ 512KB reserved heap pool prevents crash loops
✓ Traps PHP 8 Fatal Throwables & E_ERROR in <24ms

// SHUTDOWN TRAP EXECUTION FLOW

Step 1: PHP Bootloader (0ms)

mu-plugins/00-autvy-guard.php mounts shutdown listener with pre-allocated 512KB memory reserve.

Step 2: Crash Detection (<12ms)

Plugin throws fatal TypeError. Autvy intercepts before Apache/Nginx outputs HTTP 500 error page.

Step 3: Atomic Isolation (<24ms)

Offending file isolated, cached pre-break release restored, visitor receives instant HTTP 200 response.

PILLAR 03 // SECURITY BOUNDARY

The Twelve Permitted Actions

The Autvy worker binary contains an immutable cryptographic allowlist of exactly 12 discrete opcodes. It cannot execute arbitrary bash commands, open reverse shells, or touch database tables outside WordPress schema.

✓ Ed25519 digital signature enforcement
✓ 60-second sliding replay protection window
✓ Zero inbound ports (Outbound TLS 1.3 only)

OP_CLONE_SHADOW_DIR0x001

OP_VERIFY_CHECKSUM0x002

OP_STAGE_PLUGIN_UPDATE0x003

OP_EXECUTE_SYNTHETIC_HEADFUL0x004

OP_CALCULATE_PIXEL_DIFF0x005

OP_SWAP_SYMLINK_RELEASE0x006

OP_ROLLBACK_ATOMIC_POINTER0x007

OP_PURGE_EDGE_CACHE0x008

OP_APPLY_VIRTUAL_CVE_PATCH0x009

OP_ISOLATE_CORRUPT_TRANSIENT0x010

OP_EMIT_HEALTH_TELEMETRY0x011

OP_DISPATCH_INCIDENT_RECEIPT0x012

PILLAR 04 // ZERO DATA LOSS

Atomic Rollbacks via POSIX Symlinks

Traditional backups restore an entire database snapshot from 4 hours ago, wiping out all new customer orders, user comments, and cart updates. Autvy uses POSIX rename(2) symlink swaps to revert code without touching the live database.

✓ Reversion speed: <10 seconds
✓ Code separated from database state
✓ 0 customer orders lost during rollbacks

// ATOMIC SYMLINK ARCHITECTURE

LIVE DOCUMENT ROOT

wp-content/plugins → .autvy/releases/release_20260314_v2

FAILING UPDATE DETECTED

Broken plugin introduces fatal error in release_20260314_v3

ATOMIC POSIX RENAME (<10ms)

ln -sfn .autvy/releases/release_20260314_v2 wp-content/plugins

Ready to put your WordPress site on autonomous autopilot?

Experience sub-second error containment, pre-flight shadow tests, and zero data loss rollbacks.

Get a place