Companion document for woocommerce/woocommerce#66522. This digest summarizes how the changes were produced, measured, and verified, so reviewers can audit the process as well as the code.
All measurements on one host (macOS, Docker/wp-env, PHP 8.1, PHPUnit 9.6.29), sequential runs of the default suite (pnpm --filter=@woocommerce/plugin-woocommerce test:php:env).
| Run | PHPUnit time | Tests | Assertions | Result |
|---|
Date: 2026-02-27 (updated 2026-02-28 — incorporated security, correctness, and operational findings from external critique) Context: Auto-refresh polling (WOOPRD-2691) sends a full REST request every 30 seconds per active list page. This analysis explores server-side caching strategies to minimize the backend cost of that polling.
Related:
.claude/docs/analysis/2026-02-27-list-auto-refresh-analysis.md — frontend analysis.claude/docs/plans/2026-02-27-list-auto-refresh-plan.md — frontend implementation plan
Date: 2026-02-27 Linear issue: WOOPRD-2691 — Admin orders list does not load new orders dynamically Priority: High
New orders do not appear in the admin orders list until the user manually refreshes the page or navigates away and back. During the CIAB Feb 25 walkthrough, Beau framed this as a significant gap:
2026-02-22
Claude Code's --dangerously-skip-permissions ("YOLO mode") bypasses all interactive permission prompts, enabling fully autonomous execution. While productive, it introduces risks: arbitrary code execution, data exfiltration, and destructive filesystem operations. The built-in sandbox exists but isn't automatically enabled with YOLO mode, and allowUnsandboxedCommands defaults to true, letting Claude retry blocked commands outside the sandbox without approval.
| Verifying my Blockstack ID is secured with the address 13wr48a5BB3gxwN1oJfm1NWqbwKMEVWaz3 https://explorer.blockstack.org/address/13wr48a5BB3gxwN1oJfm1NWqbwKMEVWaz3 |