# Nexus Lockdown POC 1 — Laptop Package Summary

**Date:** 2026-06-04  
**Branch:** `integration/platform-sprint-before-phase1`  
**Version:** `0.1.0-poc1`  
**Status:** Ready for Jacob laptop test (pending approval — not committed)

## What was delivered

| Item | Location / URL |
|------|----------------|
| Local ZIP | `dist/nexus-laptop-poc/nexus-shell-poc.zip` |
| Local manifest | `dist/nexus-laptop-poc/latest.json` |
| Download URL | https://nexus.ninjakernen.info/downloads/nexus-shell-poc.zip |
| Manifest URL | https://nexus.ninjakernen.info/downloads/latest.json |
| SHA256 | `4bbf35aae4a79e54fb4374ccbc7949847f2028d774d1b00f3cb4545daec0d096` |
| Size | 4,373,015 bytes (~4.2 MB) |
| Coolify app | `nexus-downloads` (uuid `vh3442no566kew57rzji7qha`) |

## Build status

| Component | Result |
|-----------|--------|
| NexusShell Release build | PASS (0 warnings/errors) |
| NexusIdentity Release build | PASS (0 warnings/errors) |
| Package ZIP | PASS |
| VERIFY-NEXUS-POC.ps1 (staging) | PASS (required checks) |
| Live ZIP download + SHA256 | PASS |
| Live latest.json | PASS (UTF-8 BOM present — strip before strict JSON parse) |

## Safety status

| Check | Result |
|-------|--------|
| Winlogon shell replacement | NOT done |
| Registry changes | NOT done |
| GPO changes | NOT done |
| OS-level CMD/PowerShell disable | NOT done |
| Safe mode guard (`--safe-poc`) | Implemented |
| Secrets in package | None |
| Token in evidence | None |

## Key scripts

| Script | Purpose |
|--------|---------|
| `scripts/nexus-laptop-poc/build-package.ps1` | Build + ZIP + manifest |
| `scripts/nexus-laptop-poc/publish-coolify.ps1` | Publish to nexus.ninjakernen.info |
| Package `START-NEXUS-SAFE-MODE.ps1` | Start Identity + Shell (--safe-poc) |
| Package `STOP-NEXUS.ps1` | Stop processes |
| Package `UNINSTALL-NEXUS-POC.ps1` | Remove POC data |
| Package `VERIFY-NEXUS-POC.ps1` | Pre-flight checks |

## Git

Changes are **uncommitted** per instruction. Jacob approval required before commit/push.
