Approvals

Update Doctor never changes your site on its own suggestion. Suggested actions wait in the Approvals screen with a preview, a source and Approve, Reject and Undo buttons.

Action	What it does
Restore snapshot	Puts back files and owned options. Takes a new snapshot first
Restore owned data	Restores the item’s own tables, with a row-count preview. Also needs manage_options
Hold version	Holds one version
Pin item	Holds every version, until a date or until lifted
Set policy	Changes an item’s update policy
Deactivate plugin	Deactivates a conflicting plugin
Retry update	Runs a safe update again

Only a person can approve: a logged-in user with the right capability, on the Approvals screen or with wp update-doctor approve <id> --user=<user>. The plugin’s REST routes serve only the admin screens: every request needs the login cookie and a valid nonce, and anything else, such as an Application Password login, gets a 403. No ability can approve, reject, undo or restore. Approving a restore, a deactivation or a retry waits while another update run is active.

Proposals expire after 14 days (a setting). An executed action can be undone once, from the run report or with wp update-doctor undo. After an approved action, the site is checked again.