Is the project state saved in a separate file, and if so, how is it encrypted or protected?

The project state, such as configurations or build artifacts, can be stored in separate files (e.g., configuration files, database dumps, or CI/CD artifacts).

Various methods are used to protect such files:

• Encryption using tools like GPG or built-in CI/CD features (e.g., secrets in GitHub Actions).
• Storing secrets in dedicated managers (HashiCorp Vault, AWS Secrets Manager).
• Restricting access to files through permissions at the filesystem or repository level.

Thus, the project state can be stored in files, but for security, it is important to use encryption and access management.