Nothing is hidden from visitors: a new site starts live, and Coming soon is a choice at the top of Setup. What does change: on a brand-new site comments are switched off, the way a business site has them, while a site that already has content of its own keeps them as they were (Settings → Comments switches either way); the private visit counter starts counting (Search & visits → Visits; it stores the page's address and the referring site's name, never who visited, sets no cookie and skips browsers that ask not to be tracked); a back-to-top button, a floating header, dark mode that follows the visitor's device and your logo on the login page are on (Settings → Site features); XML-RPC is off and login lockouts are on (Settings → Advanced, Security & people). On a brand-new site "Let an AI connect" starts off, and while it is off no application password logs in, for any app (PasteTheme → AI switches it on). With the PasteTheme theme active, a starter Home page is made and set as the front page, unless the site already has one. On a brand-new install the section edges start on the slight curve with every other section shaded; a site that was here before stays straight (Design → Section edges). In the admin, for administrators: a Setup link on the plugin's row on the Plugins screen and, once, a notice there pointing to Setup that goes away by itself, a small PasteTheme Setup box on the Dashboard while Setup has steps left (Hide this hides it for good), a Site owner role in the role list (a login that can change words and pictures only), and Clear caches in the admin bar. While Setup has steps left, an administrator who logs in lands on Setup instead of the Dashboard. WordPress's Dashboard leaves out its Events and News, Quick Draft and Welcome boxes for every login, and while comments are off the Comments menu, its screen and the Dashboard's comments box are hidden. After a plugin, theme or WordPress update, or a theme switch, caches are cleared the way Clear caches does it. The plugin checks nothing against WordPress.org until an administrator switches on the daily file check (Security & people → Files that do not belong). Once it is on, the site checks its own files against WordPress.org's published lists once a day, with a count on the PasteTheme menu while anything needs a look and an email to the site's address the same day something new appears; switching it off stops it, and deactivating the plugin stops it and switches it off. From the start, the site's address gets an email when a login is given the Administrator role or an application password is added for someone who can edit the site; these two alerts go to the site's own address, contact no other server, and one switch on the same card turns them off. Developers: the new-site defaults are the PASTETHEME_NEW_SITE_COMING_SOON and PASTETHEME_NEW_SITE_EDGE constants, each behind a filter (pastetheme_new_site_coming_soon, pastetheme_section_edge_default).