NodeKit v0.2.0 — portable factory acceptance

NodeKit 0.2.0 turns the application factory into a portable, proof-bound empty-directory workflow.

Verified outcome

• nodekit create supports research-loop, SMB lending FDE, and Agentic RL research presets.
• Generated apps vendor the exact 0.2.0 compile/check runtime instead of depending on mutable GitHub state.
• Application identity is stable across LF/CRLF and binds source plus runtime.
• Understand Anything code-graph imports are pinned to the actual repository commit.
• Two genuinely empty-directory acceptance paths execute install → compile → check → demo → eval → benchmark → proof.

Evidence

• 39/39 tests passed
• hosted GitHub quality check passed
• GitGuardian passed
• registry check passed
• production dependency audit: 0 vulnerabilities
• package dry-run: 178 files, 95.2 kB packed
• factory receipt: proof/factory-acceptance.json
• receipt digest: 3f792e0ddbf7cffe5173b543b96baf3c43a7c81567f746ebfbce1e2cebce9867

Honest boundary

This GitHub release is immutable source distribution. The @homenshum/nodekit npm package was not published because the current npm session is unauthenticated (E401). The SMB app remains local-only until authenticated tenant isolation exists, and the RL preset is a local research baseline rather than trained frontier RL.