# KIMU 5.2.0 Increment 45 — four-feature completion report

**Completion date:** 29 July 2026  
**Scope:** Tools Runtime, WebSocket Conversation Mode, Website Builder and Controlled Swarm  
**Controlling lock:** R3 feature-locked specification and `config/feature-locks.json`

## Verdict

The four locked modules are **internally feature-complete**. They are no longer placeholders or operational foundations. Each module has a backend implementation, a mobile-first React workflow, persisted state, safety controls and executable static/core/frontend evidence.

Environment-dependent production acceptance remains open for live Together credentials, HTTPS, physical Android audio devices and production multi-worker soak testing. Those items cannot be certified in the packaging environment and are not represented as passed.

## 1. Tools Runtime

Completed capabilities:

- provider-compatible central function registry;
- K2.6/K2.7 Coder multi-turn tool loop;
- JSON Schema argument validation;
- workspace path confinement and version checks;
- manual, balanced and autonomous permission policies;
- read/write/execute/destructive risk handling;
- explicit approval, rejection and approval-resume;
- step, tool-call and runtime budgets;
- idempotent operation identifiers;
- cancellation and durable step/event evidence;
- file and archive operations plus static checks.

## 2. Conversation Mode

Completed capabilities:

- authenticated Flask WebSocket gateway with CSRF session handshake;
- Whisper Large v3 exclusive STT over realtime WebSocket;
- Sonic 3 exclusive TTS over persistent WebSocket;
- PCM16 16 kHz capture, server VAD and full-duplex turns;
- live model, mode, voice, speed and VAD updates;
- separate Dictation and automatic Conversation behaviours;
- true barge-in: local playback stop, queue purge, Sonic context cancellation, active Kimi cancellation, stale-turn rejection and automatic listening resumption;
- K2.6/K2.7 Coder switching with model-specific settings retained;
- session usage and interruption evidence.

## 3. Website Builder

Completed capabilities:

- four-stage mobile creation wizard;
- page, feature, theme, model and project-type configuration;
- multi-page mobile-first output;
- optional real PWA manifest, service worker, icon and offline shell;
- safe text-project ZIP import;
- K2.6 planning and independent final review;
- K2.7 Coder implementation path;
- editable file tree and restricted preview;
- static test gate;
- immutable versions, unified per-file diffs and rollback;
- deployment ZIP export with a secret-free build report.

## 4. Controlled Swarm

Completed capabilities:

- fixed Coordinator, Architect, Builder, Tester, Reviewer and Release roles;
- K2.6/K2.7 model-role allocation;
- dependency-aware parallel scheduling;
- manual, balanced and autonomous approval modes;
- configurable concurrency and tool/token/runtime/iteration budgets;
- exclusive file leases and agent-attributed tool operations;
- persisted checkpoints and resume;
- independent Tester and Reviewer gates;
- bounded repair iteration when either gate returns `VERDICT: FAIL`;
- cancellation and release provenance.

## Preserved contracts

- Only Kimi K2.6 and Kimi K2.7 Coder are selectable primary models.
- K2.7 Coder reasoning/preserved-thinking settings remain locked.
- Whisper Large v3 and Sonic 3 remain the exclusive Conversation Mode audio models.
- Existing chat, encrypted artifact storage, safe ZIP handling and offline synchronisation remain present.

## External acceptance still required

- live K2.6 and configured K2.7 Coder endpoint execution;
- live Whisper and Sonic WebSocket sessions;
- Android microphone, speaker, wired headset and Bluetooth barge-in testing;
- HTTPS reverse-proxy and secure-cookie validation;
- Flask HTTP/WebSocket tests on a target runtime with dependencies installed;
- multi-worker and long-session production soak testing.