Security fixes are provided for the latest released version.

Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting feature in the repository Security tab.

Include the affected version, a minimal reproduction, the expected impact, and any suggested mitigation. You should receive an acknowledgement within seven days.

Agent Checkpoint protects local coordination state; it does not encrypt the SQLite database. Applications remain responsible for filesystem permissions and for keeping credentials and sensitive payloads out of the database.