Document installer release architecture

README.md

@@ -8,9 +8,10 @@ This repository is the source of truth for the Nexus One AI platform package,
 including installer flows, deployment roles, portal assets, backend services,
 licensing enforcement, and the bootable ISO build path.
 
-The ISO is only one delivery surface. It stays small by pulling this package
-from cgit during setup, then the installer deploys the selected tier and
-feature set on the target server.
+The ISO is one delivery surface. The online Server installer stays small by
+pulling this package and the selected tier payload during setup. Offline
+installers embed their approved platform payload and starter models, while
+large models are delivered as separate signed model packs.
 
 ## Product Structure
 
@@ -43,6 +44,37 @@ Powered by Cezen
   four tiers). See [Section 6](#6-tier-and-packaging-guide) and
   [Section 8](#8-features-by-tier).
 
+## Installer Release Architecture
+
+Nexus One AI uses four bootable ISO products built from this shared codebase:
+
+| ISO | Connectivity | Selection and payload | Current status |
+|---|---|---|---|
+| Online Universal Server | Internet required during setup | Hardware/license preflight followed by Server S, M, L, or Max selection | Existing build path; validation continues |
+| Offline Workstation | No internet required | Fixed Workstation category with the complete local platform and approved Workstation starter models | In development |
+| Offline Server S/M | No internet required | Server S or M selected from hardware and license; small/medium local payload | Planned |
+| Offline Server L/Max | No internet required | Server L or Max selected from hardware and license; enterprise platform payload | Planned |
+
+Large Server L/Max models are not bootable installers and are not duplicated
+inside the ISO. They are separate signed model packs imported from approved USB
+or external storage after platform installation. The same signed offline update
+format will patch already-installed systems across all four ISO products; fixed
+updates are also rolled into later ISO rebuilds for clean installations.
+
+Expected removable-media guidance:
+
+- Online Universal Server ISO: approximately 2-4 GB; use an 8 GB or larger USB.
+- Offline Workstation ISO: currently estimated at 35-50 GB; use a 64 GB minimum,
+  with 128 GB recommended for reliable flashing and future growth.
+- Offline Server S/M and L/Max sizes will be recorded only after their payloads
+  are built and deduplicated; do not publish speculative final sizes.
+- Large model packs may range from a few gigabytes to hundreds of gigabytes and
+  should normally be carried on dedicated external storage.
+
+An ISO is not labelled offline merely because the source tree is embedded. It
+must pass a clean installation with network interfaces disconnected, payload
+integrity verification, reboot persistence, and service/model validation.
+
 ## Product Collateral
 
 Technical buyer-facing collateral lives in `docs/` for reuse in customer