diff --git a/docs/specification.md b/docs/specification.md
index dc7fcced7..914397026 100644
--- a/docs/specification.md
+++ b/docs/specification.md
@@ -30887,7 +30887,7 @@ Keys are organized by their top-level group. Within each group, the full dot-pat
 | `sandbox.checkpoint.enabled` | boolean | `true` | `CLEVERAGENTS_CHECKPOINT_ENABLED` | Whether checkpointing is enabled globally. When `true`, the Execute phase creates checkpoints before write operations, enabling rollback. When `false`, checkpointing is skipped (requires `require_checkpoints: false` in the automation profile). **Project-scopable.** |
 | `sandbox.checkpoint.dir` | string | `<core.data-dir>/checkpoints` | `CLEVERAGENTS_CHECKPOINT_DIR` | Directory where plan execution checkpoints are stored. Each plan gets a subdirectory named by its ULID. |
 | `sandbox.checkpoint.max-per-plan` | integer | `50` | `CLEVERAGENTS_CHECKPOINT_MAX` | Maximum number of checkpoints retained per plan. When exceeded, the oldest checkpoints are pruned (keeping the first and most recent). |
-| `sandbox.checkpoint.auto-create-on` | list | `["before_tool_execute", "after_tool_execute", "on_subplan_spawn", "on_error"]` | `CLEVERAGENTS_CHECKPOINT_AUTO_CREATE_ON` | List of automatic checkpoint triggers. `before_tool_execute` fires before each write-tool execution, `after_tool_execute` fires after, `on_subplan_spawn` fires before first subplan execution attempt, `on_error` fires when the Execute phase fails. Set to `[]` to disable all automatic checkpoints. |
+| `core.checkpoints.auto-create-on` | list | `["before_tool_execute", "after_tool_execute", "on_subplan_spawn", "on_error"]` | `CLEVERAGENTS_CHECKPOINT_AUTO_CREATE_ON` | List of automatic checkpoint triggers. `before_tool_execute` fires before each write-tool execution, `after_tool_execute` fires after, `on_subplan_spawn` fires before first subplan execution attempt, `on_error` fires when the Execute phase fails. Set to `[]` to disable all automatic checkpoints. |
 
 ##### `audit.*` — Audit Logging