Known Limitations

V5 Is Still Opt-In

Safe Agent Mode remains opt-in for this release. Enable it in VS Code settings with unfoldai.v5.safeAgentMode.enabled when you want the Command Center, Activity, Safety, MCP-lite, and local prompt flows.

MCP-lite Requires Manual Setup

The MCP server currently requires manual configuration in your agent's settings. UnfoldAI shows setup instructions in Command Center, but it does not edit Claude, Cursor, Codex, Copilot, Windsurf, or other agent config files automatically.

Restore Is Guidance-Only In V5

MCP-lite can create a visible restore request, but it never restores directly. Checkpoint restore/preview, auto-revert, hidden git commands, auto-run, auto-send, auto-apply, and enforcement are not part of this release.

Local Guest Versus AI Features

Local guest mode supports deterministic local actions such as Activity, basic Safety, Validate Session, manual checkpoints, MCP-lite metadata tools, and verification/recovery prompt generation.

AI Investigation, backend chat, account-linked history, and higher limits require sign-in and the relevant feature flags or plan state.

Terminal Capture Varies By Shell

Terminal capture quality depends on VS Code shell integration support. PowerShell or pwsh on Windows usually gives stronger capture than cmd.exe. Remote development environments such as SSH, WSL, Codespaces, and Dev Containers are best-effort.

Privacy Boundaries

Raw code, diffs, terminal output, full paths, diagnostic messages, secrets, and raw v4 event/task storage are not sent by default in v5 Command Center, Safety, MCP-lite, verification prompts, or recovery prompts. Some legacy v4 surfaces may still have their own local-only storage behavior; use Clear Local Captured Data when you want to remove captured local evidence.