NDC META 0.1.0 — VALIDACIÓN LOCAL
Fecha: 8 de octubre de 2026

51 comprobaciones correctas. WordPress local 7.1.3; PHP 8.5.10. Sintaxis analizada para PHP 7.4.

BACKEND EN WORDPRESS
[OK] Plugin activates in WordPress
[OK] Installation is paused by default
[OK] Valid test setup is ready
[OK] Settings reject malformed values and preserve a blank token
[OK] Invalid replacement token does not erase the valid token
[OK] Source URL strips query parameters and fragments
[OK] Foreign URLs rejected
[OK] Excluded path is blocked server-side
[OK] Cross-origin request is rejected
[OK] Same-origin JSON accepted
[OK] Non-JSON public request is rejected
[OK] Forged permission cookie cannot authorize an event
[OK] Valid signed permission is accepted
[OK] Public endpoint cannot invent a purchase
[OK] Consented lead enters queue
[OK] Queue has clean URL and approved matching identifiers
[OK] Repeated event and worker invocation send one request
[OK] Test code and shared event ID are preserved
[OK] Credential stays in server header, not URL
[OK] Revocation cancels queued delivery
[OK] No consent prevents API events
[OK] Transient errors schedule a bounded retry
[OK] Retry preserves ID and removes successful payload
[OK] Permanent API error is not retried
[OK] Diagnostic log contains no token or visitor IP
[OK] Admin page masks credentials and includes CSRF nonce
[OK] Administrators excluded from frontend
[OK] Frontend configuration has no API token
[OK] WooCommerce matching normalizes and hashes approved email/phone
[OK] Order stores only event ID; matching data in expiring transient
[OK] Unpaid order never creates a Purchase event
[OK] Cash on delivery waits for completed status
[OK] Paid order uses server total, currency and stable ID
[OK] Paid context removed after accepted queueing
[OK] Repeated paid hooks do not duplicate purchase
[OK] Product prices are resolved server-side, ignoring forged client values
[OK] Unknown products and negative quantities rejected
[OK] Failed/cancelled order context is discarded
[OK] Deactivation removes cleanup cron

NAVEGADOR
[OK] Default denied: no pixel or tracking events; rejected lead never replays
[OK] CF7 failure does not generate lead; success uses identical browser/server event ID
[OK] Elementor and WPForms listen to success, not submit
[OK] WhatsApp and telephone are distinct custom events without destination details
[OK] Revocation blocks subsequent events and removes matching cookies
[OK] Test mode sends only CAPI test traffic and never loads a live Pixel
[OK] Existing pixel is detected; browser-origin events are suppressed to avoid duplicates
[OK] NDC Consent adapter uses actual banner state and follows revocation
[OK] Complianz adapter follows marketing and cannot be overridden by custom API
[OK] WooCommerce AJAX add-to-cart generates event after confirmation
[OK] Receipt purchase uses server-assigned ID and is not resent to CAPI
[OK] Admin renders desktop/mobile without horizontal overflow

ALCANCE
Respuestas de Meta simuladas, sin tokens reales ni envío a cuentas de clientes. Los contratos WooCommerce se verifican con dobles de sus objetos; no se ha ejecutado una pasarela real. Los adaptadores AJAX se validan mediante sus señales de éxito. NDC Consent se prueba contra su JavaScript local 0.2. No se han probado todas las versiones de WordPress, temas, CMP, formularios o gateways. Validar cuenta real y compra controlada antes de producción.

PUBLICACIÓN
No publicado en 2026.niveldecalidad.com: el navegador obtiene 502 Bad Gateway / Connection refused tanto en wp-admin como en el producto anterior. No se han modificado menús, páginas ni productos de esa web durante esta tarea.
