{
  "schema_version": 1,
  "product": "KIMU",
  "application_version": "5.2.0",
  "release_revision": "Increment 46 Runtime Hardening",
  "locked_at": "2026-07-29T11:17:19+01:00",
  "authority": "User feature lock",
  "change_control": "No locked requirement may be removed, weakened, silently substituted or reinterpreted without explicit user authorisation and a new specification revision.",
  "models": {
    "chat_selectable": [
      {
        "profile": "k2.6",
        "model_id": "moonshotai/Kimi-K2.6",
        "capability": "general chat, planning, review and coordination"
      },
      {
        "profile": "k2.7-code",
        "model_id": "deployment-configured Kimi K2.7 Coder endpoint",
        "capability": "coding, file modification, testing and release work",
        "capability_probe_required": true
      }
    ],
    "audio": {
      "stt": {
        "provider": "Together AI",
        "model_id": "openai/whisper-large-v3",
        "exclusive": true,
        "transport": "WebSocket"
      },
      "tts": {
        "provider": "Together AI",
        "model_id": "cartesia/sonic-3",
        "exclusive": true,
        "transport": "WebSocket"
      }
    }
  },
  "implementation_order": [
    "tools-runtime",
    "conversation-mode",
    "website-builder",
    "swarm"
  ],
  "feature_locks": {
    "tools-runtime": [
      "central registry",
      "JSON schema validation",
      "risk classes",
      "scoped approvals",
      "idempotency",
      "timeouts and budgets",
      "cancellation propagation",
      "immutable audit"
    ],
    "conversation-mode": [
      "Flask WebSocket gateway",
      "Whisper STT only",
      "Sonic 3 TTS only",
      "full duplex",
      "server VAD",
      "true barge-in",
      "cancel playback, TTS context and Kimi generation",
      "stale event rejection",
      "resume listening",
      "both Kimi profiles"
    ],
    "website-builder": [
      "mobile-first wizard",
      "K2.6 planning and review",
      "K2.7 Coder implementation",
      "safe preview",
      "versioned changes",
      "rollback",
      "testing",
      "ZIP import/export"
    ],
    "swarm": [
      "coordinator-led task graph",
      "fixed role profiles",
      "file leases",
      "budgets",
      "approvals",
      "checkpoints",
      "independent review",
      "test gate",
      "release provenance"
    ]
  },
  "truthfulness": "The four locked modules remain internally feature-complete. Increment 46 hardens runtime failure paths. Live provider, HTTPS and physical Android acceptance remain external; multi-worker deployment is not supported until process-local cancellation/session state is moved to a shared broker.",
  "implemented_at": "2026-07-29T13:06:18+01:00",
  "implementation_status": {
    "tools-runtime": {
      "state": "feature complete",
      "evidence": [
        "central provider-compatible registry",
        "model-driven multi-turn tool loop",
        "JSON Schema validation",
        "manual/balanced/autonomous workspace policies",
        "risk approvals",
        "step/tool/runtime budgets",
        "idempotent audited operations",
        "cancellation and approval resume"
      ],
      "external_acceptance": "Live K2.6/K2.7 endpoint and target Flask HTTP verification"
    },
    "conversation-mode": {
      "state": "feature complete",
      "evidence": [
        "authenticated Flask WebSocket gateway",
        "Whisper PCM16 realtime stream",
        "Sonic PCM stream",
        "dynamic VAD/voice/model settings",
        "full duplex",
        "true barge-in cancellation",
        "stale-turn rejection",
        "dictation review mode",
        "automatic listening resume"
      ],
      "external_acceptance": "Live Together WebSockets, HTTPS, physical Android/Bluetooth validation and single-worker soak testing"
    },
    "website-builder": {
      "state": "feature complete",
      "evidence": [
        "four-stage mobile wizard",
        "multi-page output",
        "real PWA manifest/service worker/offline shell",
        "safe ZIP import",
        "K2.6 planning and independent review",
        "K2.7 implementation",
        "editable files",
        "restricted preview",
        "static gates",
        "unified diffs",
        "rollback",
        "secret-free ZIP export"
      ],
      "external_acceptance": "Live model endpoint generation and target-browser visual acceptance"
    },
    "swarm": {
      "state": "feature complete",
      "evidence": [
        "fixed role graph",
        "parallel dependency scheduler",
        "manual/balanced/autonomous approvals",
        "tool/token/runtime/iteration budgets",
        "file leases",
        "checkpoints and resume",
        "tester/reviewer parallel gates",
        "iterative repair on failed verdict",
        "release provenance and cancellation"
      ],
      "external_acceptance": "Live multi-agent Together single-worker soak; multi-worker requires a shared runtime broker"
    }
  },
  "completed_at": "2026-07-29T13:44:01+01:00",
  "runtime_hardening": {
    "increment": 46,
    "single_worker_required": true,
    "reason": "Chat and Conversation Mode cancellation/session state is process-local until a shared broker is implemented.",
    "audio_frame_limit_bytes": 262144,
    "installer_wheelhouse_supported": true,
    "incomplete_virtualenv_rejected": true,
    "swarm_rejection_terminal": true
  }
}