Kakunin Platform 0.1.0

First public release of the Kakunin platform — the control plane behind the hosted service at kakunin.ai: certificate authority integration, behavioral risk engine, API surface, and compliance-reporting pipeline.

Licensing — platform vs SDKs

• This repository (the platform) is AGPL-3.0. If you run a modified version as a network service, the AGPL requires you to offer users the corresponding source.
• The SDKs and integrations are Apache-2.0 — build on Kakunin with no copyleft obligation:
  • @kakunin/sdk (TypeScript) · kakunin (Python)
  • @kakunin/middleware · @kakunin/langchain · @kakunin/mastra · @kakunin/ai-sdk
  • @kakunin/mcp — Model Context Protocol server

The moat is the hosted canonical CA, not the license. Why the CA stays hosted: kakunin.ai/open-source.

In this release

• Full platform source (Next.js control plane, CA integration, risk engine, WORM audit pipeline).
• Docker image — multi-stage Dockerfile (standalone output). The build is secret-free; supply managed-service credentials at runtime. See the README "Self-hosting & local development" section.
• Governance: LICENSE (AGPL-3.0), NOTICE (third-party license elections + trademark), SECURITY.md, CONTRIBUTING.md, CLA.md, CODE_OF_CONDUCT (in progress), OpenSSF Scorecard + CodeQL workflows.

Notes

• Running the platform requires external managed services (Supabase, AWS KMS, S3 Object-Lock, Upstash, QStash, Stripe, and more — see .env.example). The canonical CA, key custody, and WORM audit are hosted by design.
• For regulated-finance teams: how Kakunin maps to the FINOS AI Governance Framework — kakunin.ai/finos.

Full history in CHANGELOG.md.

© 2026 Immortal Reality PA LLC. "Kakunin" is a trademark of Immortal Reality PA LLC.