RCIP 2.0.1 — runtime hardening and discoverability

RCIP 2.0.1 strengthens invocation and confirmation behavior while keeping protocol 1.0 and existing public APIs. RCIP now expands to React Capability Interface Protocol; the package remains @binaried/rcip.

• Prevent duplicate execution during asynchronous policy checks and pending confirmation.
• Reject stale bindings, unavailable actions, and changed semantic context before execution.
• Capture requests independently of caller mutation, protect discovery metadata, and clean up expired or cancelled confirmations.
• Release cancelled policy waits without executing late results; publish React bindings only after committed renders.
• Add searchable documentation, complete TypeScript contracts, lifecycle/security guidance, bundle measurements, a Finance case study, and a static interactive demo.
• Validate Node 20/22/24, packed React 18.2/18.3/19.1 consumers, SSR/hydration, and browser behavior. Repair secret-history scanning and update affected build dependencies.

Documentation · Quick start · Interactive demo · npm package

Cancellation remains cooperative and cannot undo completed effects. Backend authorization and write idempotency remain application responsibilities. This release adds no WebMCP adapter.