release: freeze Nexus One AI 1.0.0-rc1

specs/001-enterprise-experience/contracts/systemd/nexus-one-activation-health.service

@@ -0,0 +1,19 @@
+[Unit]
+Description=Nexus One AI post-activation health window
+Requires=ollama.service chromadb.service cezen-api.service nginx.service
+After=ollama.service chromadb.service cezen-api.service nginx.service
+OnFailure=nexus-one-activation-rollback.service
+ConditionPathExists=/var/lib/nexus-one/installer/active-operation.env
+
+[Service]
+Type=oneshot
+EnvironmentFile=/var/lib/nexus-one/installer/active-operation.env
+ExecStart=/usr/bin/python3 /usr/lib/nexus-one/activation-health-window.py --operation-id ${OPERATION_ID} --profile-config ${HEALTH_PROFILE_CONFIG} --samples ${HEALTH_SAMPLES} --interval-seconds ${HEALTH_INTERVAL_SECONDS} --timeout-seconds ${HEALTH_TIMEOUT_SECONDS} --window-timeout-seconds ${HEALTH_WINDOW_TIMEOUT_SECONDS} --evidence ${HEALTH_EVIDENCE_PATH}
+TimeoutStartSec=600
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/var/lib/nexus-one/installer
+StandardOutput=journal
+StandardError=journal