Auto Update Approval Guard (AUAG) is a powerful Joomla! system plugin that places a controlled approval workflow in front of Joomla’s auto update mechanism. Instead of installing new core versions silently in the background, each version must first be explicitly approved or blocked via secure email links.

With per-version tokens, flexible recipient configuration, a clear lifecycle including a locked state after successful updates, and a detailed approval history view, AUAG combines the convenience of automatic updates with the control and transparency of a manual release process.

Features

•     Approval layer for auto updates: Intercepts Joomla’s onBeforeJoomlaAutoupdate event and blocks automatic core updates until the requested version is explicitly approved.
      Per-version lifecycle: Tracks each Joomla! version with timestamps for creation, notification, approval, blocking and a final locked state after successful installation.
      Locked status after update: Once a version has been successfully installed, AUAG marks it as locked and freezes its state for documentation and audit purposes.
      Secure tokens per version and site: Generates cryptographically secure, version-bound tokens that are required to approve or block an update via email links.
      Email-based approve & block actions: Sends notification mails containing one-click Approve and Block links that work without a Joomla! backend login.
      Flexible recipients: Supports Joomla! user IDs, user groups (only users with "Receive System Emails" enabled) and direct email addresses, automatically merging and deduplicating all recipients.
      Single notification per version: Sends exactly one initial approval request per version; repeated auto update attempts reuse the stored state without spamming further mails.
      Permanent blocking of versions: A blocked version is never auto-installed on this site again. No new tokens or mails are generated for that version, and the confirmation mail clearly states that only manual backend installation is possible.
      Update success mail: After an approved version has been successfully installed via auto update, AUAG sends a success notification email with the old and new Joomla! version numbers.
      Approval history in the plugin settings: A dedicated history view in the plugin configuration lists all versions and their status (pending, approved, blocked, locked) including all relevant timestamps.
      Respects Joomla! auto update setting: Only becomes active when auto updates are enabled in the Joomla! Update component (com_joomlaupdate). If auto updates are disabled, AUAG stays passive.
      Joomla! 6 native implementation: Built as a modern Joomla! 6 system plugin using services, namespaced classes and event subscribers, following the same architecture as other Pro extensions.