Blocks, release, and exemptions

Temporary blocks

Blocks are local and time-bounded. Review the masked hint, reason, and expiry before releasing one. A release does not erase the underlying aggregate Activity record.

Trusted exemptions

• Use an exact IP for a known office or system
• Use only a narrow CIDR when a fixed trusted network requires it
• Use authenticated WordPress user IDs for known customers
• Email addresses cannot grant trust because a guest can type someone else's email
• Exemptions never bypass manual blocks or invalid/replayed checkout proof