release: freeze Nexus One AI 1.0.0-rc1

specs/001-enterprise-experience/contracts/test-vectors/README.md

@@ -0,0 +1,26 @@
+# Artifact Contract Test Vectors
+
+These files are specification fixtures only. They contain conspicuous non-production identifiers and
+digests. They MUST NOT be copied into an installer or accepted by a release verifier.
+
+- `workstation-iso-manifest.valid.json`: structurally valid Workstation ISO payload example.
+- `compatibility-cases.json`: deterministic compatibility outcomes and primary reason codes.
+- `ed25519-test-public.pem`, the four `*-signature.valid.json` envelopes, and
+  `signature-cases.json`: real test-only Ed25519 positive vectors plus tamper and unknown-key
+  negatives. The private key was transient and is intentionally absent.
+- `model-pack-manifest.valid.json`, `update-bundle-manifest.valid.json`, and
+  `trust-bundle-manifest.valid.json`: structural examples for the remaining artifact types.
+- `verification-evidence.md`: current parsing, digest, signature, and scope-limited verification result.
+
+Before Gate 1 approval, add:
+
+1. independent security/platform review of the test-vector procedure;
+2. owner approval of the schemas, compatibility contract, and signing policy.
+
+No production key or customer license may appear in this directory.
+
+Run the complete automated fixture suite with Python packages `jsonschema` and `cryptography`:
+
+```bash
+python3 validate_vectors.py
+```