“Let an AI go into my website and change things? What if it breaks something?” If that’s what you’re thinking, it’s the most reasonable concern there is. Your website is your storefront, your business card, and sometimes your cash register. Before you hand over the keys, you should ask: what can it touch, is there a backup before it touches anything, how do you undo a mistake, and who has the final say?
We’re not going to tell you “the AI is smart, it won’t make mistakes.” AI does make mistakes, so Roamer AI is designed on the assumption that it will: a snapshot before every change, every step undoable, your own confirmation required for high-risk actions, and a screenshot check after every change. We’ll go through each line of defense below, then finish with a sample conversation so you can see what a safe change actually looks like.
The 30-Second Overview
| Line of defense | What it means |
|---|---|
| Automatic snapshots before changes | A snapshot is created automatically before anything is written (at most one every 10 minutes, keeping the latest 5), plus weekly platform snapshots |
| Every step can be undone | Every change is logged; say “change it back” to roll changes back one by one. Before a snapshot restore, the current state is backed up first |
| Your confirmation for high-risk actions | A system-enforced confirmation code: only a message you send can confirm it; valid for 60 minutes, single use |
| Screenshot checks after changes | Desktop at 1366 px wide and mobile at 390 px wide; it reports back only after checking the layout |
| Account and scope | Works through a dedicated account, never needs your admin password, and access is revoked the moment you disconnect |
| Problems it can’t solve | Handed off to a RoamerHost engineer |
Line of Defense 1: An Automatic Snapshot Before Every Change
Before Roamer AI writes anything to your site, it automatically creates a snapshot first. The snapshot includes the database, meaning your site’s content and settings, and some snapshots also include theme files. If something breaks, there’s a “before” state to go back to.
There are two kinds of snapshots:
| Snapshot type | When it’s created | How many are kept |
|---|---|---|
| Automatic pre-change snapshot | Before Roamer AI writes anything, at most one every 10 minutes | The latest 5 |
| Weekly platform snapshot | Once a week | 2 per site |
“At most one every 10 minutes” means that if several changes are made within 10 minutes, they share the same snapshot. “Keeping the latest 5” means older snapshots are replaced by newer ones. So snapshots are meant for rescuing things that broke recently, not for keeping an indefinite history.
Line of Defense 2: Every Step Can Be Undone. Just Say “Change It Back”
Beyond snapshots, every change Roamer AI makes is logged. If you’re not happy, say “change it back” or “undo,” and it rolls back step by step. You can also ask, “What did you just change?” It can produce a before-and-after comparison and tell you in plain language what it touched.
If you need to restore your whole site to a snapshot, the system adds another layer of protection:
- Before restoring, it backs up the current state one more time.
- If that backup fails, the restore doesn’t happen.
- After restoring, if the restore turns out to be the wrong call, you can roll back again.
That way, the act of restoring can’t cost you something else in the process.
You just say:
- “What did you just change?” It lists what it touched this time, in plain language.
- “Change the button color back and keep everything else.” It rolls back only the item you named.
- “Change back everything from today.” It rolls back today’s changes step by step, asking for your confirmation on any high-risk ones.
- “Restore the snapshot from before today’s changes.” It explains the impact, gives you a confirmation code, and backs up the current state before restoring.
Line of Defense 3: High-Risk Actions Always Need Your Own Confirmation
Which actions need confirmation?
- Bulk updates to plugins, themes or WordPress core
- Restoring a snapshot
- Resetting a password
- Switching PHP versions
- Switching or installing a theme
- Activating or deactivating a plugin
- All emergency rescue actions, such as deactivating a problem plugin, rolling back a plugin version or disabling a code snippet
Everyday edits like changing some text, swapping an image or adjusting a color don’t need a confirmation code, but it still lays out a plan for you first and only starts once you say yes.
How does the confirmation code work?
- The AI first explains what it will do and what it will affect.
- A confirmation code button appears on screen, such as “Confirm K7Q2.”
- Clicking the button sends a confirmation message from you, and only then does the action run.
Why do we say it’s enforced by the system rather than left to the AI’s discipline?
If the AI’s rules just said “ask the user before doing anything dangerous,” that would be relying on discipline. The AI could misunderstand you, get led astray by something it read, or assume you’d already agreed. Roamer AI’s confirmation codes don’t work that way. The system is the gatekeeper:
- Only a message you send can confirm: the AI has no way to click confirm for you, and typing the confirmation code itself does nothing.
- Different parameters won’t go through: you’re confirming one specific action. If you confirmed deactivating plugin A, that code can’t be used to deactivate plugin B.
- Valid for 60 minutes: if you click too late, it has to explain again and ask for a new confirmation.
- Single use: the same confirmation code can’t be used for a second action.
Line of Defense 4: It Checks Its Own Work With Screenshots
When a site gets “broken” by an edit, it often isn’t completely down. More likely a button on mobile gets pushed out of view, or some text ends up overlapping an image. You can’t spot problems like these by looking at settings in the admin.
That’s why Roamer AI automatically takes screenshots after every change and checks the layout itself at two sizes, desktop (1366 px wide) and mobile (390 px wide). It reports back only once everything looks right, instead of saying “done” on instinct. You get the screenshots too, so you can double-check for yourself.
And More: A Dedicated Account, Only the Site You Connect, and Human Backup
A dedicated account, no admin password needed
When you connect a RoamerHost-hosted site with one click, the system creates a dedicated account called roamer-ai on your site, along with an Application Password, and the AI works through that account. You never hand your own admin password to anyone, and when you disconnect, that Application Password is revoked automatically.
Only the site you connect
Roamer AI works through the dedicated account on the site you connected. Sites you haven’t connected have no account for it to get into. When to connect and whether to disconnect is always up to you.
Problems it can’t solve go to a human engineer
If you say “get me a person” or “get me an engineer,” or if the AI has tried every reasonable fix without success, the problem needs server-level work, data needs recovering, or your site is down and it can’t bring it back, it notifies a RoamerHost engineer and includes the conversation, your site details, the cause it found and what it has already tried. If your site is down and it’s affecting your business, the case is flagged as urgent.
What Does a Safe Change Look Like? A Sample Conversation
Here’s a sample conversation showing where each of these lines of defense comes into play during a single change.
You: The homepage looks too cluttered. Change the main headline to “Weekend-Only Brunch,” make the button gold, and deactivate the old slider plugin we don’t use anymore.
Roamer AI: Sure. Here’s my plan: 1. Change the homepage headline text. 2. Use custom styles to make the homepage button gold. 3. Deactivate the old slider plugin. Step 3 is a high-risk action: once it’s deactivated, that section will disappear from any page that uses the slider. Right now only the homepage uses it. If that’s OK, click the button below. [Confirm K7Q2]
You: (clicks “Confirm K7Q2”)
Roamer AI: Done. A snapshot was created automatically before the changes. The headline is updated, the button is gold, and the old slider plugin is deactivated. I checked the desktop (1366 px) and mobile (390 px) screenshots, and the layout looks fine. The screenshots are attached below.
You: The gold button is too close to the background color and hard to see. Change the button color back.
Roamer AI: I’ve changed the button color back to how it was. The headline and the deactivated plugin stay as they are. I took new screenshots to confirm, and the button is clearly visible. If you want to go all the way back to how things were before today’s changes, just say “change everything back.” Reactivating the plugin in that case will also need your confirmation.
In this conversation: it lays out a plan first, so you know what it will touch. Deactivating a plugin is a high-risk action, so a confirmation code appears and nothing runs until you click it. A snapshot is taken automatically before the change. It checks desktop and mobile screenshots afterward. And when you say “change it back,” it rolls back only the one item you named.
To Be Honest: What Can’t These Safeguards Guarantee?
AI makes mistakes. These lines of defense exist so mistakes can be caught and undone, not to guarantee it will never be wrong. Two more things are worth saying up front. Platform snapshots are restore points, not full disaster recovery: only a limited number are kept, and they don’t necessarily include every file. For important sites, we recommend also using a backup plugin that regularly stores backups off-site (for example, in cloud storage). And snapshots and restores, along with emergency rescue, are only offered on RoamerHost-hosted sites. An external WordPress site connected through Application Passwords doesn’t have those two safety nets, which makes having your own backups even more important. If you want those two safety nets, you can move your site to RoamerHost: WP × Roamer AI Pro includes help migrating your existing site, so contact [email protected] and we’ll help you move it over.
To see what Roamer AI can actually do, check out the Roamer AI section of the service page. WP × Roamer AI Pro is NT$11,988 a year (avg. NT$999/mo, billed yearly) and combines hosting, a WordPress site and full Roamer AI access in one. You can also fill out the free trial request form first. After you submit it, someone from our team will contact you to confirm what you need and then set up a trial environment. If you want to try Roamer AI, say so in the requirements field.
FAQ
Q: Can the AI click the confirmation code for me?
No. Confirmation codes are enforced by the system. Only a message you send can confirm, and the AI has no way to click confirm on your behalf. The code is valid for 60 minutes and works only once, and if what’s about to run differs from what was described, it won’t go through.
Q: When I say “change it back,” how far back can it go?
Every change Roamer AI makes is logged and can be rolled back one by one. As for snapshots, the latest 5 automatic pre-change snapshots are kept (at most one every 10 minutes), and 2 weekly platform snapshots are kept per site. For anything older than that, you’ll need your own separate off-site backups.
Q: Does Roamer AI need my admin password?
No. When you connect a hosted site with one click, the system creates a dedicated roamer-ai account and an Application Password, and the AI works through that account. When you disconnect, the Application Password is revoked automatically and the AI can no longer get into your site.
Q: Will restoring a snapshot wipe out my latest orders?
It might. Restoring a snapshot returns your site data to how it was when the snapshot was taken, so orders or comments added after that may be affected. That’s why restoring a snapshot is a high-risk action that needs your confirmation. The system also backs up the current state before restoring, and you can roll back again afterward. If you run an online store, read the impact it describes carefully before you click confirm.
Q: What if the AI broke something and I didn’t notice right away?
When you notice, just tell it what’s wrong or say “change it back.” If the site won’t load or you can’t get into the admin, hosted sites can use the emergency rescue process. If it can’t bring the site back, it hands the case to a RoamerHost engineer.
Further Reading
- Afraid to Update Plugins? Backups, Batches, Rollbacks
- White Screen or Locked Out: The Roamer AI Rescue Process
- Can’t Find the Right Plugin? Just Ask the AI to Build It
- WP × Roamer AI: Finally, Someone to Look After Your Site
- Roamer AI FAQ: What It Does, Is It Safe, What It Costs
Need someone to build it for you?
When what you need goes beyond what plugins and code snippets can do (large custom plugins, integrations with your company’s systems, rebuilding an old site), someone has to work in the code. Roamer Tech, RoamerHost’s parent company, takes on advanced WordPress development:
