bm-checkpoint — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bm-checkpoint (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create a durable, immutable handoff note for current Codex work. Use this when the user asks to checkpoint, wrap up, hand off, remember the work state, or when the post-compaction SessionStart context requests the deliberate handoff.
When no project is pinned, discover projects with bm_project(command="list") and pass the selected project's external ID as project on note/search calls. With several addressable projects, these calls require an explicit scope even when a default is configured.
Read ~/.codex/basic-memory.json, then the nearest project .codex/basic-memory.json; project keys override user keys:
primaryProject, default omittedcaptureFolder, default codex/<git top-level directory name>placementConventions, optionalsessionProfile, default generalrepository, required when sessionProfile is codingApply the bm-writing skill before drafting the note.
Gather repo evidence:
the original objective
git status --shortsession_id, agent, codex_turn_id, trigger, and modelvalues from the checkpoint request, when present
Use direct, read-only evidence for repository and pull-request state. Do not claim a test passed unless you ran it or the user supplied the result. Treat host-provided session metadata as opaque identity data. Preserve exact non-empty values; never infer or rewrite them. For older requests supplying only codex_session_id, use that exact value as session_id with agent: codex. Do not emit the legacy field on new checkpoints.
A checkpoint is a durable handoff, not a status dump or commit-by-commit changelog. Tell the story for a human or agent returning later. Treat it as a snapshot plus pointers to authoritative artifacts, not a replacement for tasks, decisions, plans, issues, pull requests, commits, diffs, checked-in docs, or source files.
Every invocation creates a new checkpoint. Never edit, replace, or append to an earlier checkpoint, even when the topic is unchanged.
Use the title:
Codex checkpoint - <UTC YYYY-MM-DDTHH-MM-SSZ> - <short topic>
The UTC timestamp is part of the immutable checkpoint identity and avoids filename-unsafe colons. If bm_write reports a title collision, retry with the smallest available numeric suffix such as - 2. Never resolve a collision by modifying the existing note.
Call bm_write with project=<configured primaryProject>, overwrite=False, and output_format="json" on every attempt. When primaryProject is omitted, discover projects and pass the selected project external ID explicitly. The frontmatter project field is descriptive metadata and does not replace the tool's project argument. The explicit non-overwrite flag must win even when the user's write_note_overwrite_default setting is true. Only accept a successful result with action: created; treat the tool error ALREADY_EXISTS as the title collision above, and stop on any other action or error.
Write a note to Basic Memory. For the general profile:
title: the timestamped checkpoint title abovedirectory: configured captureFoldertags: ["codex", "checkpoint"]type: codex_sessionstatus: openproject: <primaryProject if known>cwd: <current cwd>started: <current timestamp>username: <current username>hostname: <current hostname>capture: deliberateagent: codexsession_id: <host-provided Codex session id>, when suppliedcodex_turn_id: <host-provided Codex turn id>, when suppliedtrigger: <host-provided checkpoint trigger>, when suppliedmodel: <host-provided model slug>, when suppliedFor the coding profile, write type: coding_session and use the same common frontmatter plus these schema-required fields:
repository: <confirmed stable repository identifier>repo_root: <git rev-parse --show-toplevel>cwd: <current cwd>branch: <git rev-parse --abbrev-ref HEAD>git_sha: <git rev-parse HEAD>When the current branch has a pull request, also add the typed optional fields pull_request_number, pull_request_title, pull_request_url, pull_request_state, pull_request_base, and pull_request_head. Resolve the pull request with a read-only GitHub query; omit those fields when no PR exists. Write the number as a quoted string, for example pull_request_number: "123", so exact metadata queries behave consistently across storage backends. Never infer or copy repository/PR identity only from conversation text. Stop if the required coding fields cannot be proven.
When session_id is available, pair it with agent: codex for same-chat identity:
primaryProject for bothcodex_session and coding_session notes with filters={"agent": "codex", "session_id": "<exact host-provided id>"}. Also search legacy notes with filters={"codex_session_id": "<exact host-provided id>"}.
checkpoint by its valid started timestamp. Read it directly from primaryProject. Confirm the exact agent/session_id pair, or the exact legacy codex_session_id when shared identity is absent. Reject conflicting agent/session fields; a bare session ID is never cross-agent identity.
- continues [[Exact previous checkpoint title]] under ## Relations.Do not edit the previous immutable checkpoint to add a forward edge; Basic Memory backlinks make the chain navigable in both directions. If there is no verified earlier match, omit the lineage relation. Never infer same-chat lineage from repository, branch, topic, timestamps alone, or lifecycle envelope notes.
Begin the body with # <exact note title>.
Use these sections, omitting optional ones that add no value:
## Summary: one concrete sentence that does not merely repeat the title## Story: original objective -> latest user intent -> approach -> currentstate and impact in substantive prose
## Working State: separate durable state from machine-local or fragile state## Changed Files, when paths are useful for resuming## Verification, for checks actually run and their outcomes## References, for verified repository, commit, pull-request, issue, spec,or documentation links
## Observations## Relations, when the thread has an obvious graph targetPrefer repository-relative paths in the body. Required absolute repo_root and cwd frontmatter remain machine-local evidence. Label dirty or untracked files, ignored files, active processes, dev servers, temporary directories, and local tool caches as machine-local or fragile when they matter to resumption. Do not present them as durable project state.
Make the note pointer-first:
path for artifacts outside the graph
For GitHub-backed repository work, resolve the canonical repository URL with a read-only GitHub query. Render the current repository, current pushed commit, pull request, and any materially relevant GitHub issues or commits as Markdown links under ## References and where they appear in prose. Use the canonical URL returned by GitHub for pull requests and issues. Before linking a commit, verify that GitHub can resolve that SHA in the confirmed repository. If a commit is local or unpushed, keep the SHA as code, label it local or unpushed, and do not construct a GitHub link that may not exist. Do not turn an ambiguous bare issue number or SHA into a link without proving its repository.
Use observations to distill durable facts for structured recall rather than duplicating every narrative sentence:
[result] for concrete outcomes[decision] for each decision made or preserved[blocker] for each unresolved blocker[next_step] for the one primary next action; include exactly one[verification] or [changed_file] only when the item is itself importantproject memory, not merely supporting detail
Do not create separate Decisions, Blockers, or Next Action sections with plain bullets. Omit empty categories instead of writing placeholder text such as "None."
Relations are not observations. Put them under ## Relations using Basic Memory relation syntax, for example - relates_to [[Exact existing note title]]. Never write [relates_to] or a bare memory:// URL as an observation. Only add a relation when its target is an existing checkpoint, task, decision, spec, issue, or PR note. The verified same-chat continues edge is the checkpoint lineage relation; do not add a second generic relation to that same target.
Reply with:
$bm-orient "<exact returned resume identifier>"Choose the first non-empty returned value in this order: permalink, file_path, then title. Use the returned value verbatim; never construct or guess a permalink or file path.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.