Architected to Touch Your Code, Not Your Data
Autvy is built on an absolute least-privilege, minimal-telemetry architecture. We never store, inspect, or transfer your customer database records, passwords, or order data.
Data Isolation Matrix
What Autvy Sees vs. What Stays on Your Server
- ✕ Customer orders, addresses, and credit cards
- ✕ User accounts, passwords, and auth tokens
- ✕ WordPress post content, pages, and draft media
- ✕ Customer comments and private form submissions
- ✕ Raw database dumps and production SQL records
- ✓ PHP runtime version & WordPress core version
- ✓ Plugin and theme version manifest
- ✓ Sanitized crash stack traces (file & line numbers)
- ✓ Synthetic TTFB latency response times
- ✓ Machine action receipts and rollback timestamps
Exhaustive Worker Allowlist
The Twelve Permitted Actions
The Autvy worker cannot run bash commands or arbitrary system scripts. Its execution is bounded strictly to this compiled opcode list.
| Opcode | Identifier | Functional Description | Safety Boundary |
|---|---|---|---|
| 0x01 | OP_CLONE_SHADOW_DIR | Spawns local CoW hardlink tree for isolated pre-flight testing | Restricted to wp-content/.autvy/ |
| 0x02 | OP_VERIFY_CHECKSUM | Validates plugin archive hashes against WordPress.org API | Cryptographic SHA-256 match |
| 0x03 | OP_STAGE_PLUGIN_UPDATE | Extracts updated code into shadow directory | Zero touch to live plugins dir |
| 0x04 | OP_EXECUTE_SYNTHETIC_HEADFUL | Runs headless browser check on staging checkout and homepage | Nice -n 10 priority limit |
| 0x05 | OP_CALCULATE_PIXEL_DIFF | Compares DOM screenshot pixels against pre-update baseline | >0.2% variance triggers alert |
| 0x06 | OP_SWAP_SYMLINK_RELEASE | Executes atomic POSIX rename(2) pointer swap to promote tested code | <10ms atomic operation |
| 0x07 | OP_ROLLBACK_ATOMIC_POINTER | Immediately reverts symlink back to previous verified release | Zero live database overwrite |
| 0x08 | OP_PURGE_EDGE_CACHE | Triggers targeted cache purge on LiteSpeed, Nginx, or Cloudflare | Only affected URL endpoints |
| 0x09 | OP_APPLY_VIRTUAL_CVE_PATCH | Injects virtual regex filtering rule to block known 0-day exploits | Read-only input sanitizer |
| 0x0A | OP_ISOLATE_CORRUPT_TRANSIENT | Clears expired wp_options autoload bloat | Specific transient keys only |
| 0x0B | OP_EMIT_HEALTH_TELEMETRY | Sends memory, CPU, and TTFB latency metrics to supervisor | Encrypted TLS 1.3 egress |
| 0x0C | OP_DISPATCH_INCIDENT_RECEIPT | Compiles human-readable summary of remediation | Zero PII or credentials logged |
User Control
Three Operational Modes
Autonomous Mode (Default)
Full hands-off self-healing. Autvy pre-tests updates, applies safe changes, automatically reverts regressions, and sends you an email receipt while you sleep.
Approval Mode
Autvy runs all pre-flight shadow tests and visual diffs, then generates a 1-click execution link for your team to review and approve before live promotion.
Monitor-Only Mode
Real-time 60-second health monitoring, synthetic checkout tests, and CVE alerts without applying any automated code changes or rollbacks.
European & US Data Centers
Autvy Supervisor clusters are hosted in AWS Frankfurt (eu-central-1) and AWS US-East (us-east-1).
All telemetry in transit is encrypted via TLS 1.3 with strict ephemeral key exchange (ECDHE) and stored with AES-256 encryption at rest.