# Nexus Build 87 — Platform POC checkpoint

| Field | Value |
|-------|-------|
| **Version** | `0.1.0-identity2` |
| **Build** | **87** |
| **Branch** | `integration/platform-sprint-before-phase1` |
| **Date** | 2026-06-05 |
| **Mode** | Overlay / POC — not production |

## Summary

Build 87 completes **platform wave 2**: an administrable Nexus platform POC with Identity registre, remote enrollment and device presence, local `.nxp` package install/update/remove, shell policy enforcement, design system v2 chrome, Windows replacement layer (audit + Nexus dialogs/default apps), and installer v2 (WPF). Distribution remains Coolify/nginx manifest channel; no Winlogon/MSI and no remote control.

## What landed

| Area | Highlights | Evidence |
|------|------------|----------|
| Platform foundation | Organizations, enrollment, registry users, Control Center API surfaces | `docs/evidence/nexus-platform-foundation/` |
| Design system 2.0 | `NexusWindow` + shared controls across apps | `docs/evidence/nexus-design-system-v2/` |
| Package system 1.0 | `.nxp` manifest + local repository | `docs/evidence/nexus-package-system-v1/` |
| Deployment engine 1.0 | Store-driven install / update / remove | `docs/evidence/nexus-deployment-engine-v1/` |
| Policy engine + enforcement | Evaluator + UI hiding (not gray-out) across launcher, dock, store, settings | `docs/evidence/nexus-policy-engine-v1/`, `nexus-policy-enforcement-v1/` |
| Remote foundation | 30s heartbeat, presence API, Control Center visibility (polling POC) | `docs/evidence/nexus-remote-foundation-v1/` |
| Windows replacement 1.0 | Dependency audit, replacement plan, Nexus default-app/dialog POC | `docs/evidence/nexus-windows-replacement-v1/` |
| Installer v2 | WPF 6-step flow + prerequisite checks | `docs/evidence/nexus-installer-v2/` |
| Status | Wave 2 rollup vs roadmap | `docs/evidence/nexus-platform-status/STATUS-vs-PLAN.md` |

## Build & test (Release)

- `NexusIdentity.Api` — PASS (0 errors)
- `NexusShell` — PASS (0 errors; NU1510 package prune warnings only)
- `NexusInstaller` — PASS (0 errors)
- `NexusShell.Tests` — **12/12 passed**

## Known limitations

- **Overlay mode:** Shell runs beside Windows; lockdown is app-launch policy only.
- **Remote:** Heartbeat + presence only — **no** remote control, registry, or shell association changes.
- **Realtime:** Presence uses HTTP polling (~45s UI refresh); SignalR not implemented.
- **Control Center:** Settings section + API; no dedicated hosted portal.
- **Distribution:** Prior CDN build may lag until NexusSetup.exe rebuild/upload for build 87.
- **Infra:** Domain `/health` 404 and PostgreSQL unhealthy on Coolify (ops follow-up).
- **CI:** No automated pipeline on push; manual Release validation.
- **Identity DB:** Local SQLite seed; delete `nexus-identity.db` / policy cache under `%LocalAppData%` when retesting enrollment or policies.

## Upgrade / test notes

1. Stop running `NexusShell` / Identity host before rebuilding.
2. Remove stale local DB if schema or seed changed: `nexus-identity.db` (and related `-wal`/`-shm` if present).
3. Clear or review `%LocalAppData%/NinjaNexus/policies` when validating policy enforcement.
4. Install via rebuilt `NexusSetup.exe` from `scripts/nexus-laptop-poc` — do not rely on in-place hot swap for POC.

## References

- Architecture: `docs/architecture/NEXUS_DEPLOYMENT_ARCHITECTURE.md`, `NEXUS_POLICY_ARCHITECTURE.md`
- Update channel evidence: `docs/evidence/nexus-update-channel/`
