# KIMU 5.2.0 Increment 46 — runtime hardening report

**Date:** 29 July 2026  
**Scope:** Environment preparation, runtime failure-path correction and release hardening.  
**Feature lock:** Unchanged; Tools, Conversation Mode, Website Builder and Swarm remain locked and implemented.

## Repairs applied

1. **Active chat stream cancellation** — cancelling a chat now closes the active Together HTTP response instead of waiting indefinitely for another streamed chunk.
2. **Voice context ordering** — Conversation Mode now selects the newest configured context window and restores chronological order before model inference.
3. **Audio protocol bounds** — binary and base64 PCM16 frames are strictly decoded, size limited and alignment checked.
4. **Typed VAD controls** — thresholds and durations are normalised into explicit safe ranges before reaching the realtime provider session.
5. **Session sequencing** — audio is rejected before the authenticated session-start handshake and voice preview cannot overlap an active turn.
6. **Swarm approval rejection** — rejection now marks both the task and swarm failed with a structured, auditable terminal error; it no longer leaves the swarm stuck in a running state.
7. **Installer resilience** — removed the mandatory pip self-upgrade, added an optional local wheelhouse, added precise failure output and retained static/core checks on dependency failure.
8. **Partial-environment handling** — verification ignores an incomplete `.venv`; run scripts require an explicit successful-install marker.
9. **Deployment safety** — default workers changed to one. Readiness fails closed when `KIMU_WORKERS` exceeds one because realtime cancellation/session state is process-local.
10. **Environment probe** — added `scripts/environment_probe.py` for machine-readable runtime capability reporting.

## Prepared environment outcome

- Source workspace extracted and initialised.
- SQLite schema creation, WAL and integrity checks passed.
- Vendored React production bundle built successfully.
- Static/core verification is operational.
- The current packaging host cannot install the complete Flask runtime: its Python package gateway exposes no Flask/Werkzeug distributions, and neither the supplied dependency pack nor local caches contain compatible wheels.
- No live Together request was attempted because runtime dependencies and user credentials are absent.

## Deployment requirement

Use `KIMU_WORKERS=1` for this release. A future shared cancellation/session broker is required before multi-worker production operation can be certified.