> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bymiles.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Site protection

> Use Miles carefully while editing a WordPress site.

Miles can make powerful WordPress changes. Site protection keeps those changes reviewable while you work.

Design sandboxes are normally unlocked because they are disposable places to build and experiment. Connected WordPress sites are locked by default unless an administrator explicitly unlocks Miles.

## Locked vs unlocked

| State             | Meaning                                                                                            |
| ----------------- | -------------------------------------------------------------------------------------------------- |
| Miles is locked   | Miles can plan, inspect, draft, and ask for approval before visitor-visible or destructive changes |
| Miles is unlocked | Miles can make visitor-visible or destructive changes without stopping for approval                |

Use [Site protection](/safety/site-protection) to understand the environments where Miles should be used and how to work safely in them.

## What locked still allows

Locked does not mean Miles cannot help. Miles can still inspect the site, discuss changes, create plans, prepare drafts, and ask for approval when a protected change is needed.

Changes that usually need approval include publishing or editing pages and posts, changing WordPress settings, updating plugins or themes, and moving content to trash.

## Safer defaults

* keep a recent backup
* ask for draft pages first
* review approval cards before approving
* publish manually after review
* avoid broad changes unless you can restore the site

## Approval cards

An approval card covers the specific change shown on that card. It is not blanket permission. Deny the card if the scope is unclear, too broad, or affects the wrong page or setting.

If you deny an approval card, Miles will stop that change instead of trying another route.

For more detail, see [Site protection](/safety/site-protection).