Title: Shipping Contract Guard for WooCommerce Author: shippingcontractguard Published: August 16, 2026 Last modified: August 16, 2026 --- Search plugins ![](https://ps.w.org/shipping-contract-guard/assets/banner-772x250.png?rev=3649397) ![](https://ps.w.org/shipping-contract-guard/assets/icon.svg?rev=3649397) # Shipping Contract Guard for WooCommerce By [shippingcontractguard](https://profiles.wordpress.org/shippingcontractguard/) [Download](https://downloads.wordpress.org/plugin/shipping-contract-guard.1.8.1.zip) * [Details](https://wordpress.org/plugins/shipping-contract-guard/#description) * [Reviews](https://wordpress.org/plugins/shipping-contract-guard/#reviews) * [Installation](https://wordpress.org/plugins/shipping-contract-guard/#installation) * [Development](https://wordpress.org/plugins/shipping-contract-guard/#developers) [Support](https://wordpress.org/support/plugin/shipping-contract-guard/) ## Description Shipping Contract Guard turns important WooCommerce shipping results into repeatable, manager-approved checks. Start with one shipping promise. For example, if free shipping begins at EUR 75, the plugin checks synthetic carts immediately below, exactly at, and immediately above that boundary. You review the methods and prices WooCommerce returns before saving anything. Later checks compare against that approved version; current behavior is never silently treated as the new baseline. Local mode is free and requires no account: * protect supported WooCommerce core Flat Rate, Free Shipping, and Local Pickup boundaries; * protect an exact public result returned by another configured shipping method after approving the disclosed quote behavior; * run invented carts without creating a checkout, customer, or order; * distinguish **Everything works**, **Problem found**, and **Could not verify**; * review finite coverage, recent changes, and likely affected approved checks; * keep 90 days of bounded local history and export JSON, CSV, or a human-readable assurance report; and * preview and apply one exact core-method availability change with full-contract verification and automatic rollback; * capture and restore one exact passing core-method state; and * activate an expiring local continuity path with verified restoration. Operator is an optional EUR 29/month service for one store. It adds scheduled and post-change checks, independent missed-run supervision, email alerts, minimized offsite evidence, an accountable incident, and verified recovery. A successful checkout page never grants access; only verified billing events and a fresh signed site policy authorize paid work. #### Deliberate limits Coverage is finite. Unsupported methods, unsafe scenarios, incomplete calculations, and ambiguous evidence remain **Could not verify**. Shipping Contract Guard does not claim that every checkout path is covered or that a preceding configuration change caused a failure. Core suggestions use only public WooCommerce configuration. Provider-agnostic promises use WooCommerce’s public returned-rate boundary. The plugin never reads carrier credentials or private provider settings. An explicitly approved public-rate check may cause the configured method to make its ordinary quote request for the invented cart and destination. The plugin does not create orders, submit checkout, process payments, buy labels, contact shoppers, or grant remote control over shipping. Its guarded write boundary is limited to the enabled state of one explicitly previewed WooCommerce core Flat Rate, Free Shipping, or Local Pickup zone-method instance. Prices, thresholds, destinations, zone order, products, coupons, provider settings, orders, payments, and labels remain outside that boundary. ### External services #### Configured shipping-rate services When a manager explicitly approves a public-result preview or later check, WooCommerce calls the enabled shipping methods for that synthetic cart. A configured method may send the invented destination, measurements, or product attributes needed for its ordinary rate quote to its own provider. Shipping Contract Guard does not inspect that provider’s settings or credentials. Review the provider’s privacy terms before approving the calculation. #### Optional Shipping Contract Guard Operator The plugin makes no Shipping Contract Guard service request until a WooCommerce manager accepts the fixed disclosure. Starting Operator generates an opaque site- bound checkout reference and private signing key locally, then opens Stripe-hosted checkout. The private signing key never goes to Stripe. Verified Stripe subscription and invoice events, not a redirect, establish entitlement. After pairing, the plugin contacts `https://api.shippingcontractguard.com` to pair or revoke the site, rotate its public signing identity, retrieve signed policy, configure the selected schedule and alert email, deliver minimized signed run evidence, retrieve current supervision state, and update a manager-submitted incident handoff. Transfers can contain opaque site, contract, run, and case identifiers; a public signing key; timestamps and nonces; configuration fingerprints; pass, fail, unknown, and completeness states; supported boundary kinds and core method classes; hashed method-instance identities; bounded amounts and currency; error codes; and bounded configuration-change facts. A submitted incident can also contain acknowledgement, an operational owner label, and a bounded note. Do not put customer data, credentials, or secrets in those fields. The connector excludes products, raw destinations, customers, orders, payment details, merchant payment-processor data, and carrier credentials. The service retains evidence according to the subscribed plan, initially 90 days. Disconnecting stops new paid work and transfer. An organization owner can export data or request deletion; deletion remains cancelable for 24 hours before tenant records are purged, apart from a minimal replay-protection tombstone. Privacy policy: https://shippingcontractguard.com/privacy.html Terms: https://shippingcontractguard.com/terms.html Stripe privacy policy: https://stripe.com/privacy ### Privacy Local data includes approved contract definitions, synthetic case results, configuration fingerprints and bounded change facts, run timestamps, local operational decisions, and optional service state. Completed local runs are retained for up to 90 days and 500 records. Deactivation preserves data. Uninstall preserves data unless an administrator explicitly enables delete-on-uninstall. The plugin adds suggested text to **Settings > Privacy**. Use invented test products and destinations; never enter customer data, credentials, or secrets. A privacy- safe diagnostic download contains only versions, schema and scheduler state, connection presence, and aggregate latest-run counts. Optional WooCommerce logging is off by default and records only an admin action name plus success or error outcome. ## Screenshots [⌊Protect one detected shipping boundary with a recommended first check.⌉⌊Protect one detected shipping boundary with a recommended first check.⌉[ Protect one detected shipping boundary with a recommended first check. [⌊Review every generated synthetic cart, method, and price before approval.⌉⌊Review every generated synthetic cart, method, and price before approval.⌉[ Review every generated synthetic cart, method, and price before approval. [⌊See today's plain-language shipping status and one next action.⌉⌊See today's plain- language shipping status and one next action.⌉[ See today’s plain-language shipping status and one next action. [⌊Review bounded check history and detailed expected-versus-observed evidence.⌉⌊ Review bounded check history and detailed expected-versus-observed evidence.⌉[ Review bounded check history and detailed expected-versus-observed evidence. ## Installation 1. Install and activate WooCommerce. 2. Install and activate Shipping Contract Guard. 3. Open **WooCommerce > Shipping Contract Guard**. 4. Choose **Preview recommended checks** when a supported rule is detected. Otherwise open **Set up your first protected rule**. 5. Review the generated synthetic carts, expected methods, and prices. 6. Choose **Save and run first check**. The first check should take only a few minutes. Planning, coverage, recovery, and agency tools stay inside the Advanced sections and are not required for initial setup. Deployment tooling may run `wp shipping-contract-guard verify`. Exit 0 means safe, 2 means blocked, 3 means the evidence could not decide, and setup or execution errors use exit 1. ## FAQ ### Does local verification require an account? No. Contract setup, approval, manual checks, local history, diagnostics, and exports work without an account or Shipping Contract Guard service request. ### Does this inspect my shipping plugin? No. Core suggestions support WooCommerce core methods. A provider-agnostic promise records only method identities and prices returned through WooCommerce’s public shipping calculation after explicit approval. ### Does this test checkout or payment? No. It calculates isolated synthetic shipping packages without submitting checkout or creating an order. Stripe is contacted only when a manager chooses the optional Operator subscription. ### What does Could not verify mean? The method, scenario, or observation was unsupported, unsafe, ambiguous, or incomplete. It is never counted as working. See https://shippingcontractguard.com/support.html for the next check for each reason family. ### Is High-Performance Order Storage supported? Yes. The plugin declares HPOS compatibility and does not use WooCommerce order storage for its synthetic checks. ### Are Cart and Checkout blocks supported? Current block checkout is included in the finite browser matrix. WooCommerce 8.2 block rendering is excluded because that version creates a checkout-draft order merely by rendering, which violates the plugin’s zero-order test invariant. Classic checkout remains covered at the minimum boundary. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Shipping Contract Guard for WooCommerce” is open source software. The following people have contributed to this plugin. Contributors * [ shippingcontractguard ](https://profiles.wordpress.org/shippingcontractguard/) [Translate “Shipping Contract Guard for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/shipping-contract-guard) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/shipping-contract-guard/), check out the [SVN repository](https://plugins.svn.wordpress.org/shipping-contract-guard/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/shipping-contract-guard/) by [RSS](https://plugins.trac.wordpress.org/log/shipping-contract-guard/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.8.1 * Routed the downloadable assurance report’s self-contained CSS through the WordPress style registration, enqueue, and inline-style APIs. * Prepared every plugin-owned SQL table identifier with WordPress’s `%i` placeholder, including retention, explicit cleanup, and opt-in uninstall queries. #### 1.8.0 * Simplified the primary manager navigation and moved planning, coverage, and guarded- change workflows behind Advanced sections. * Added privacy-safe Site Health information, a diagnostic download, opt-in bounded WooCommerce logging, and direct documentation/support links. * Added an exact core-method change preview, passing-evidence known-good vault, and bounded continuity playbook. * Kept guarded core-method application and continuity local and free. Operator remains the optional external supervision service; no price, threshold, zone- order, opaque-provider, order, payment, or remote-command authority was added. #### 1.7.2 * Added persistent manager navigation, task-first setup, clearer Operator activation evidence, and accessible responsive controls. See `CHANGELOG.md` in the source repository for the complete private development history. ## Meta * Version **1.8.1** * Last updated **5 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.5 or higher ** * Tested up to **7.0.4** * PHP version ** 8.1 or higher ** * Tags * [monitoring](https://wordpress.org/plugins/tags/monitoring/)[q&a](https://wordpress.org/plugins/tags/qa/) [shipping](https://wordpress.org/plugins/tags/shipping/)[testing](https://wordpress.org/plugins/tags/testing/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/shipping-contract-guard/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/shipping-contract-guard/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/shipping-contract-guard/reviews/) ## Contributors * [ shippingcontractguard ](https://profiles.wordpress.org/shippingcontractguard/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/shipping-contract-guard/)