=== Aschere PDF Reference Verifier ===
Contributors: aschere0577
Tags: pdf, media library, verification, documents, delivery
Requires at least: 6.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Verify which posts/pages reference a media-library PDF, check size/mtime/hash, optionally fetch the same-site URL, and export a delivery snapshot.

== Description ==

After you replace or update a PDF in the Media Library, clients and agencies often need a quick answer: which pages still point at this file, and does the public URL match the file on disk?

**Aschere PDF Reference Verifier** (free) is a read-only Tools screen that:

1. Lets an administrator pick **one** local PDF from the Media Library
2. Scans **core post and page** body content (including the core File block) for direct file URLs
3. Lists referencing pages and their public/publish status
4. Shows local size, mtime, and SHA-256
5. Optionally fetches the attachment URL **once** from this site only (SSRF-safe host check) and compares the hash
6. Builds a plain-text **delivery snapshot** you can copy or download

This plugin does **not** replace files, edit content, or change download permissions.

= Coverage honesty =

Uncovered sources (Elementor, Bricks, ACF fields, offload/CDN rewrites, menus, widgets, etc.) are labeled **not covered**. Zero hits inside coverage is **never** shown as a site-wide “no references” conclusion.

= What this free version does not do =

* Batch or scheduled scans
* Automatic replace / rollback
* Full-site cache purge promises
* Legal/compliance audit certificates
* Checkout, tax, security gateway, SEO, forms, or page-builder deep integration

== Installation ==

1. Upload the `aschere-pdf-reference-verifier` folder to `/wp-content/plugins/`
2. Activate the plugin through the Plugins screen
3. Open **Tools → Aschere PDF Reference Verifier**

== Frequently Asked Questions ==

= Does this replace file-replacement plugins? =

No. File-replacement plugins swap the file. This plugin verifies references and identity after a change (or before delivery).

= Can it scan ACF / Elementor? =

Not in the free version. Those locations are explicitly marked not covered.

= Is the public fetch safe? =

Fetches are limited to the same host as `home_url()`, HTTP(S) only, short timeout. Failures are reported as `unknown`.

== Changelog ==

= 1.0.0 =
* Initial free release: single-PDF verify, core post/page scan, identity, optional same-site fetch, snapshot export.
