Rewrite the README to the standard

Leads with the problem rather than the API, features are things you can do,
and there is one example instead of an inline reference.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Tk8y5eZa3CHVVSM6nVxsJw

Author: arraypress

README.md

@@ -1,124 +1,74 @@
-# MaxMind minFraud (WordPress)
+# MaxMind minFraud
 
-A focused PHP library for the MaxMind minFraud Score API, built for WordPress with `wp_remote_post` and transient caching. No external HTTP dependencies. Drop-in for fraud-scoring at checkout, on signup, or anywhere a 0-99 risk score is useful.
+Score a transaction for fraud risk before you capture the payment.
 
-## Features
+## What it does
 
-* 🎯 **One thing well** — wraps the minFraud Score endpoint (the cheapest of MaxMind's three minFraud tiers, returns the 0-99 risk score)
-* 💰 **Funds-aware** — surfaces `funds_remaining` / `queries_remaining` from every successful response so you can wire up budget alerts
-* 🚦 **Stable error handling** — distinguishes transport / auth / quota failures via `WP_Error` rather than coercing them into a 0 score
-* 🪶 **Zero deps** — only PHP and WordPress's HTTP API
-* 🔁 **Transient caching** — repeat lookups within a 10-minute window cost zero API calls
-* 📦 **Predictable response shape** — getter-friendly Score wrapper that won't break when MaxMind extends the JSON
+MaxMind's minFraud Score takes what you know about an order — the IP, the
+email, the billing address, the payment method — and returns a risk score
+from 0 to 100, informed by what it has seen across everyone else using it.
 
-## Requirements
+This calls the Score endpoint, hands back a response object, and turns a
+failure into a `WP_Error` rather than an exception, so a checkout can decide
+what to do about it rather than dying.
+
+## Features
 
-* PHP 7.4 or later
-* WordPress 5.0 or later
-* MaxMind account + minFraud license key
+* Get a risk score from 0 to 100 for an order
+* Send as much or as little as you have — an IP alone works, more is better
+* Read MaxMind's warnings about fields it could not use
+* Keep an eye on the credits and funds left on the account
+* Get the query id back, for looking a decision up later or disputing it
+* Cache answers, and cache failures briefly so an outage is not amplified
 
 ## Installation
 
 ```bash
-composer require arraypress/maxmind-minfraud
+composer require arraypress/wp-maxmind-minfraud
 ```
 
 ## Quick start
 
-```php
-use ArrayPress\MaxMind\MinFraud\Client;
-
-$client = new Client( '123456', 'your-license-key' );
-
-$result = $client->check_score( [
-    'device' => [ 'ip_address' => '203.0.113.42' ],
-    'email'  => [ 'address' => 'alice@example.com' ],
-    'billing' => [
-        'country' => 'US',
-        'region'  => 'CA',
-        'city'    => 'Los Angeles',
-        'postal'  => '90210',
-    ],
-] );
-
-if ( is_wp_error( $result ) ) {
-    error_log( 'minFraud failed: ' . $result->get_error_message() );
-    return;
-}
-
-if ( $result->is_high_risk() ) {
-    // 75+ risk score — block / hold the order
-}
-
-$score    = $result->get_risk_score();        // 42.5
-$query_id = $result->get_query_id();          // for cross-referencing in MaxMind dashboard
-$funds    = $result->get_funds_remaining();   // USD remaining on the account
-$warnings = $result->get_warnings();          // any non-fatal warnings
-```
-
-## Configuration
+Score an order and hold the risky ones for review:
 
 ```php
-$client = new Client(
-    'account-id',
-    'license-key',
-    [
-        'cache_enabled' => true,    // default true
-        'cache_ttl'     => 600,     // seconds; default 10 min
-        'cache_prefix'  => 'mm_',   // transient key prefix
-    ]
-);
-```
-
-## Request payload
-
-The `check_score()` payload mirrors [MaxMind's spec](https://dev.maxmind.com/minfraud/api-documentation/requests). The minimum is `device.ip_address`, but pass everything you have — minFraud's score quality scales with how much context you give it.
+use ArrayPress\MaxMind\MinFraud\Client;
 
-Useful fields beyond the basics:
+$client = new Client( $account_id, $license_key );
 
-```php
-$client->check_score( [
-    'device'  => [
-        'ip_address' => '203.0.113.42',
-        'user_agent' => $_SERVER['HTTP_USER_AGENT'] ?? '',
-    ],
-    'email'   => [ 'address' => 'alice@example.com' ],
-    'account' => [ 'user_id' => '42' ],
-    'billing' => [ 'country' => 'US', 'postal' => '90210' ],
-    'shipping' => [ 'country' => 'US', 'postal' => '90210' ],
-    'payment' => [ 'processor' => 'stripe' ],
-    'event'   => [ 'type' => 'purchase' ],
+$score = $client->check_score( [
+	'device' => [ 'ip_address' => $order->ip ],
+	'email'  => [ 'address' => $order->email ],
+	'billing' => [
+		'country'  => $order->billing_country,
+		'postal'   => $order->billing_postcode,
+	],
 ] );
-```
 
-## Error handling
-
-Errors come back as `WP_Error` rather than an empty Score, so you don't accidentally treat an auth failure like a 0 score:
-
-```php
-$result = $client->check_score( $payload );
-
-if ( is_wp_error( $result ) ) {
-    $code    = $result->get_error_code();    // 'minfraud_api_error', 'minfraud_bad_response', etc.
-    $message = $result->get_error_message();
-    $data    = $result->get_error_data();    // includes HTTP status when relevant
+if ( is_wp_error( $score ) ) {
+	return; // Capture anyway; do not lose the sale to an API outage.
+}
 
-    // Fall back to your own rules, log, etc.
+if ( $score->get_risk_score() >= 50 ) {
+	$order->flag_for_review( $score->get_query_id() );
 }
 ```
 
-Possible error codes:
+The more of the payload you fill in, the better the score. An IP on its own
+is a weak signal.
 
-* `minfraud_missing_credentials` — account ID / license key not provided
-* `minfraud_api_error` — MaxMind returned a non-2xx with an error body
-* `minfraud_bad_response` — couldn't decode the JSON
-* `http_request_failed` — WordPress transport error (passed through verbatim)
+## What it does not do
 
-## Why not the official SDK?
+It scores, it does not decide. Where the threshold sits is a business
+question — too low and you turn away real customers, too high and it earns
+nothing — and it is worth reviewing against your own chargebacks rather than
+taking a number from a blog post.
 
-MaxMind ships an [official PHP SDK](https://github.com/maxmind/minfraud-api-php) that you can absolutely use. This library exists for projects that want a smaller surface area — it's framework-aware (transient cache, `wp_remote_*` transport, no Composer-level Guzzle / PSR-7 deps) and exposes only the Score endpoint, which is what most rule engines actually need.
+## Requirements
 
-If you need Insights or Factors (subscores for IP location, email reputation, device, etc.), use the official SDK or open an issue.
+* PHP 8.3 or later
+* WordPress 7.1 or later
+* A MaxMind account id and licence key
 
 ## License