# CHANGELOG · security-subscriptions

## 2026-10-22, ~3:10 PM PT: Critic FIX round 1 (`../_critic/CRITIC-security-subs-php2shell-2026-10-22.md`)
Backup before edits: `/workspace/security-subscriptions.bak-2026-10-22-precritic/`.

1. PAGE-COPY s3: "Extra work is $225 an hour" → `{hourly rate, DECISION D12}`. New **D12** in OFFERS.md §5 (A $225 same as CARE / B $195 plan clients / C $175 incident checks), plus OFFERS §0, Watch incident line, D3 reasoning and STRIPE-PLAN hourly price now point to D12. CARE's own $225 is still listed as a CARE fact.
2. PAGE-COPY s5 step 6: removed "within the first month". First-report timing added to **D2** (OFFERS.md and README); onboarding checklist step 11 now `{timing, DECISION D2}`.
3. PAGE-COPY s6 Clinton block: wrapped in `REMOVABLE SECTION D11 START/END` markers, heading marked "Critic recommends cut", OfficeChai link removed (article dated Oct 23), only the X post linked. Clinton removed from the sources block (re-add only if kept). Checked: with the block cut, nothing else on the page mentions Clinton or the quote.
4. PAGE-COPY s2 pill THIS WEEK → OCTOBER 2026.
5. FAQ "security plugin": Wordfence quote replaced with a paraphrase, no quotation marks ("Wordfence's help pages describe its firewall as running inside WordPress"). Crew note and README fact sheet updated. Not verified firsthand: Wordfence's blog still blocks our fetchers.
6. EMAIL-TEMPLATES t3: "A few clients have asked..." → "If you'd like us to keep doing this every month, we've put it into three plans:".
7. README: files table now says D1 to D12; decision table adds D12 and Critic's cut recommendation on D11.
- 2026-10-22 3:45 PM PT: D1 decided by json: patch check $395.