Update ISO installer tiers and backend deployment

README.md

@@ -1,4 +1,4 @@
-# Cezen AI Suite — Installer
+# Nexus One AI — Installer
 
 ## Quick Start
 
@@ -12,6 +12,61 @@ Server reboots automatically after NVIDIA drivers install. Phase 2 runs on its o
 
 On the custom ISO, Ubuntu autoinstall now pauses on the installer network screen so the operator can choose the final IP address from the VM console before installation continues.
 
+## Software-Only / Existing Hardware
+
+Run a feasibility scan before quoting or installing on customer-owned hardware:
+
+```bash
+bash scripts/cezen-feasibility.sh
+```
+
+The checker reports CPU, RAM, disk, NVIDIA GPU/VRAM, tool readiness, available features, and a recommended Cezen profile. It writes JSON to `/opt/cezen/feasibility.json` when possible, otherwise `./feasibility.json`.
+
+Install on existing hardware without the appliance NVIDIA phase:
+
+```bash
+sudo bash install.sh --software-only --profile=auto
+```
+
+For small systems or slow customer networks, the installer skips default model downloads on lightweight profiles. To force the same behavior manually:
+
+```bash
+sudo bash install.sh --software-only --profile=cpu-ai --skip-model-pull
+```
+
+Profiles:
+
+| Profile | Use When | Installs |
+|---|---|---|
+| `core` | no GPU / low RAM | portal, backend, nginx, health/metrics API |
+| `cpu-ai` | 32 GB+ RAM, no usable GPU | core + Chroma/Ollama CPU path, model pull optional |
+| `gpu-starter` | 24-32 GB VRAM | local AI starter stack, model pull optional |
+| `gpu-standard` | 48-96 GB VRAM | standard GPU stack |
+| `gpu-pro` | multi/high-VRAM GPU | advanced GPU stack |
+| `gpu-max` | multi-node or HGX-class | full stack, custom sizing |
+
+## Sellable v1 Admin APIs
+
+The backend exposes the first productization APIs for software-only and appliance deployments:
+
+| API | Purpose |
+|---|---|
+| `GET /api/license` | Shows current tier, feature matrix, and whether the tier is locked by Cezen. |
+| `GET /api/system/feasibility` | Returns the generated hardware feasibility report or live fallback. |
+| `GET /api/system/readiness-report` | Combines license, feasibility, and install readiness into a customer-facing report payload. |
+| `GET /api/audit/report?days=7` | Basic audit summary for handover and admin review. |
+| `GET /api/system/backups` | Lists local backups. |
+| `POST /api/system/backups` | Creates a local backup of Cezen data. |
+| `POST /api/system/backups/{name}/restore` | Restores a named local backup and creates a pre-restore safety snapshot. |
+
+CLI backup helper:
+
+```bash
+sudo bash scripts/cezen-backup.sh backup
+sudo bash scripts/cezen-backup.sh list
+sudo bash scripts/cezen-backup.sh restore /opt/cezen/backups/cezen-backup-YYYYmmdd-HHMMSS.zip
+```
+
 ## What Gets Installed (Entry Tier)
 
 | Service | Port | Notes |
@@ -42,7 +97,10 @@ NVIDIA driver install will succeed but `nvidia-smi` won't show GPUs — that's e
 ## Pull More Models
 
 ```bash
-bash models/pull-models.sh --tier=entry
+bash models/pull-models.sh --tier=starter   # phi3:mini + embeddings
+bash models/pull-models.sh --tier=basic     # llama3.1:8b, mistral:7b, codellama
+bash models/pull-models.sh --tier=pro       # + llama3.1:70b, mixtral, deepseek-coder
+bash models/pull-models.sh --tier=max       # + llama3.1:405b, mixtral:8x22b
 ```
 
 ## File Structure
@@ -52,7 +110,10 @@ cgit/
 ├── install.sh                    ← Entry point
 ├── ansible/
 │   ├── phase1_nvidia.yml         ← Phase 1: drivers (triggers reboot)
-│   ├── entry.yml                 ← Phase 2: full stack
+│   ├── starter.yml               ← Phase 2: Starter tier (1 GPU, small team)
+│   ├── entry.yml                 ← Phase 2: Basic tier (1–2 GPU, department)
+│   ├── pro.yml                   ← Phase 2: Pro tier (2+ GPU, multi-team)
+│   ├── max.yml                   ← Phase 2: Max tier (4–8 GPU, enterprise)
 │   └── roles/
 │       ├── base/                 ← OS, Python, Miniconda, LangChain
 │       ├── nvidia/               ← Drivers, CUDA 12.4, cuDNN 9