diff --git a/CHECKPOINT-encryption.md b/CHECKPOINT-encryption.md
index 671af43..f1604c3 100644
--- a/CHECKPOINT-encryption.md
+++ b/CHECKPOINT-encryption.md
@@ -42,8 +42,13 @@ truncated npub instead of the user's chosen name.
 
 ## Commits added in this session
 
+- `ae5ddda` Allow new profile methods through the Electron IPC allowlist
 - `a6329d5` Publish profile metadata (name + picture) so external clients show it
 
+**Gotcha for future work:** any new backend request type must also be added to
+`RENDERER_METHODS` in `frontend/electron/main.ts`, or the main process rejects it with
+"rejected renderer method" before it reaches the Rust backend.
+
 ## Verification commands run (all green)
 
 Rust (repo root):