This is the frozen RC1 release contract for a model-less, offline-capable appliance. It includes local browser commissioning, signed 30-day machine-bound trial generation, license feature profiles, monitoring and backup/restore hooks, SBOM/checksum gates, and clean-server qualification. Model weights are separate future signed packs.

Coding and Meeting edge agents are not implemented or licensed in RC1. agent-registry.schema.json reserves only their future centrally managed control-plane contract: enrollment, device identity, certificates, declared capabilities, content-free audit correlation and license allocation.

RC1 is fail-closed. A distributable artifact may not be called signed or qualified until an approved amd64 build host supplies a non-empty Ubuntu base ISO, complete offline payload, production release key, generated SBOM/checksums, and a passing disconnected wiped-server qualification receipt.

Generate the customer trial only on the controlled signing host:

python3 make-trial.py --private-key /secure/trial.pem --machine-id MACHINE_ID --customer CUSTOMER --output trial.json

Qualification deliberately returns non-zero unless real media is supplied and the command runs as root on a disposable Linux server with NEXUS_OFFLINE_QUALIFICATION=1.