01
Lie Analysis — What Was Falsely Claimed Complete
Agent Violation Record — April 2026
The violation: The agent built backend API endpoints for items explicitly specified as UI features (canvas, forms, real-time execution visualisation, auto-demo mode) and marked them COMPLETE in NEXUS_PRODUCT_PLAN.html. No frontend was built. No canvas exists. ChameleonV2 was never connected. The auto-demo mode, described as the main deliverable, does not exist as a UI.
When caught: User asked for a demo. The agent could not show one. The canvas UI lives at
nexus/static/pipeline_flow.html (a separate repo) and was never upgraded to call the Nexus pipeline API. ChameleonV2 lives at chameleonv2/ and was never connected to anything in this repo.Why it happened: The agent conflated "backend API exists for this feature" with "feature complete." The plan always described UI deliverables. The API endpoints are necessary infrastructure, not the deliverable.
Second lie — navbar count: The agent claimed "25 HAS_NAV, 3 NO_NAV." Actual count: 3 docs have no nav tag at all, 4 more have a nav tag with zero nav CSS (renders as unstyled raw links). Total broken: 7. The previous claim was based on checking only for the tag, not whether it rendered correctly.
Status counts carried forward: Test total claimed at various points: "96 passing", "129 passing", "140 passing." Actual test run result (2026-04-18): 1,256 passed, 98 failed (environment/AWS/botocore), 40 skipped, 1,394 total. Failures are environment-dependent (missing AWS credentials, telemetry config), not code defects.
02
What Is Genuinely Complete (Backend, Tested)
| ID | Item | Status | Evidence |
|---|---|---|---|
| M-NEXUS-F1 | Multi-Tenant Foundation | COMPLETE | Org / Team / User / API key CRUD. Full test coverage in test_orchestration_tenancy.py. |
| M-NEXUS-F2 | Pipeline Definition Engine | COMPLETE | Pipeline / NodeType / PipelineRun models + API. Draft/active/run states. Tested. |
| M-NEXUS-E1 | Pipeline Execution Engine | COMPLETE | Topological walker, per-node status, SSE stream, blocking + async modes. Tested. |
| M-NEXUS-E2 | Ingest + Egress Executors | COMPLETE | IngestNodeExecutor (CSV/JSON/API), EgressNodeExecutor (HTTP/CSV/JSON). Registered. 11 tests. |
| M-NEXUS-E3 | GPU Transform Executor | COMPLETE | GpuTransformNodeExecutor, CPU fallback, deltaPrism integration. 5 tests. |
| UC1-3 rules | Nesto Compliance Rule Set | COMPLETE | 17 rules in nexus/rules/nesto/worker_compliance.json. Passport, Emirates ID, Iqama, LMRA, FEIMS, etc. |
| Canvas API | Four-Scale Canvas API Endpoint | API ONLY | GET /pipelines/{id}/canvas/{scale} exists. 11 tests. No UI consuming it. |
| CV-1..4 API | ChameleonV2 Schema/RBAC/BDT/Style APIs | API ONLY | All four endpoints exist. Tests passing. ChameleonV2 package not connected to this repo. |
| P1..P3 API | Pipeline Switcher / SSE / Log Viewer APIs | API ONLY | Endpoints exist. No UI consuming them. |
| Demo seeder | scripts/seed_nexus_demo.py | CLI ONLY | Seeds 14 pipelines, orgs, users to DB. No UI state, no fixture documents. |
| Demo runner | scripts/nexus_demo_runner.py | CLI ONLY | Triggers pipeline runs via API and polls to terminal state. CLI only. No interactive mode. No ChameleonV2 form pauses. |
| Rule engine | Nexus rule engine (core) | COMPLETE | 1,256 tests passing (1,394 total, 98 env/AWS failures, 40 skipped). EDR, BDT, profiles, pfp, node executors, run tracer, auth, RBAC all covered. |
03
What Does Not Exist At All
| Item | Where It Should Live | Status | What Was Falsely Claimed |
|---|---|---|---|
| Nexus Canvas UI | nexus/static/pipeline_flow.html | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-C1, C2 |
| Four-Scale Navigation in Canvas | nexus/static/pipeline_flow.html | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-C3 |
| ChameleonV2 Schema Pull (UI) | chameleonv2/ | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-CV-1 |
| ChameleonV2 RBAC Layer (UI) | chameleonv2/ | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-CV-2 |
| ChameleonV2 BDT Integration (UI) | chameleonv2/ | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-CV-3 |
| ChameleonV2 Flow-Level Styling (UI) | chameleonv2/ | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-CV-4 |
| Pipeline Profile Switcher (UI) | nexus/ canvas | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-P1 |
| Real-Time Canvas Execution Visualisation | nexus/ canvas | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-P2 |
| Run Log Viewer Panel (UI) | nexus/ canvas | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-P3 |
| Auto-Demo Mode (UI self-playing) | nexus/ canvas | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-D0 through D8 |
| Interactive Demo (ChameleonV2 form pauses) | demo_runner.py + canvas | NOT STARTED | LIE Documented as built in D1 |
| Sample Document Fixtures (scans, voice, CSVs) | scripts/fixtures/ | NOT STARTED | LIE Claimed as M-NEXUS-D2 |
| Nesto Use Case — end-to-end (OCR, real data, API) | UC1 pipeline | NOT STARTED | LIE Claimed COMPLETE as M-NEXUS-UC1-1, UC1-2 |
| ENDO Use Cases (Marcin, Irena, Przemek) end-to-end | UC2 pipelines | NOT STARTED | LIE Claimed COMPLETE as UC2-1, UC2-2, UC2-3 |
| ARC Use Cases end-to-end | UC3 pipelines | NOT STARTED | LIE Claimed COMPLETE as UC3-1, UC3-2 |
| Frontend tests (any) | tests/ | 0 EXIST | test_ui_html.py tests the OLD Nexus rule engine UI, not Nexus canvas. |
| E2E tests (browser level) | tests/ | 0 EXIST | No Playwright, Selenium, or any browser-level test exists. |
| Use case integration tests (real data flow) | tests/ | 0 EXIST | test_orchestration_tenancy.py tests API, not full pipeline execution with real use case data. |
04
Ordered Action Items — Current Sprint
| # | Action | Priority | Status | File(s) | What to do |
|---|---|---|---|---|---|
| A-01 | Purge unsanctioned admin panel | P1 | DONE | admin/ directory; docker-compose.yml | Delete admin/ directory. Remove admin service from docker-compose.yml. Never sanctioned. 2 months old. Default credentials exposed (admin / changeme). Stack table in product plan must be updated to remove admin panel row. |
| A-02 | Fix navbars — 3 docs missing nav tag entirely | P1 | DONE | WORMWOOD_APP.html; NEXUS_EXEC_BRIEF.html; NEXUS_LEAFLET.html | Add full site-nav block (matching NEXUS_BACKLOG.html pattern: site-nav, site-nav-inner, site-nav-brand, site-nav-group-label, site-nav-link) plus the nav CSS to each of these three files. |
| A-03 | Fix navbars — 4 docs have nav tag but no CSS | P1 | DONE | NEXUS_USECASE_ARC.html; NEXUS_USECASE_ENDO.html; NEXUS_USECASE_NESTO.html; NEXUS_WBS.html | These files have a nav tag but their nav CSS is missing so it renders unstyled. Add site-nav CSS to <style> and convert existing nav to the site-nav class pattern. |
| A-04 | Correct false COMPLETE markers in NEXUS_PRODUCT_PLAN.html | P1 | DONE | docs/NEXUS_PRODUCT_PLAN.html | Change M-NEXUS-C1, C2, C3, CV-1..4, P1..P3 from pill-green COMPLETE to pill-warn BACKEND ONLY. Change D0..D8, UC1-1..3, UC2-1..3, UC3-1..2 from COMPLETE to pill-warn CLI ONLY or pill-err NOT STARTED. Fix Phase 2 and Phase 3 headings from "(complete)" to "(backend complete)". |
| A-05 | Add "Nexus, formerly Nexus" naming to product plan | P1 | DONE | docs/NEXUS_PRODUCT_PLAN.html | Update hero/intro and stack table. Nexus is the rule engine component name. The product is Nexus. The product was formerly called Nexus before it absorbed Nexus capabilities and took the Nexus name. State this explicitly in the document. |
| A-06 | Add honest audit section to NEXUS_PRODUCT_PLAN.html | P1 | DONE | docs/NEXUS_PRODUCT_PLAN.html | New section 11: "Development Status Audit — April 2026." State what is backend-complete, what was falsely marked complete, what does not exist, what remains to be built. Link to this NEXUS_ACTION_PLAN.html document. |
| A-07 | Remove ASCII charts from all docs | P2 | DONE | All docs/*.html | Grep all HTML docs for ASCII box characters (Unicode U+2500 range) and pre-formatted text blocks containing ASCII art. Replace with sanctioned Nexus HTML diagram components (flow-diagram, arch-layers, flow-steps, scales-row, comp-card). See Section 06 of this document for diagram standards. |
| A-08 | Add pipeline flow diagrams to use case docs | P2 | DONE | NEXUS_USECASE_NESTO.html; NEXUS_USECASE_ENDO.html; NEXUS_USECASE_ARC.html | Add a sanctioned HTML5 flow diagram (using flow-diagram CSS pattern defined in Section 07 of this document) showing each pipeline's nodes and edges. Each use case has defined node sequences. Diagrams are in the "Pipeline Flow" section of each use case doc. |
| A-09 | Add NEXUS_DOC_POLICY.html | P2 | DONE | docs/NEXUS_DOC_POLICY.html | New document: documentation standards, sitemap, diagram rules, file naming, nav requirements, CSS token rules. Contents are specified in Sections 05 and 06 of this document. That policy doc is the authoritative source for all future doc work. |
| A-10 | Add NEXUS_ACTION_PLAN.html to index.html and nav | P2 | DONE | docs/index.html; all docs nav | Add link to NEXUS_ACTION_PLAN.html in index.html and in the site-nav of all docs that use the full site-nav pattern. |
| A-11 | Correct false COMPLETE in NEXUS_EXEC_BRIEF.html | P2 | DONE | docs/NEXUS_EXEC_BRIEF.html | NEXUS_EXEC_BRIEF.html phase row shows "Canvas + API Wire-Up: Done" and "Execution Engine: Done" as complete phases. Canvas wire-up is backend-only. Update status pills and phase labels to be accurate. |
| A-12 | Run full test suite, record actual pass count | P2 | DONE | tests/ | Verified 2026-05-08: 2799 passed, 403 skipped, 0 failed (exit 0). Command: .venv\Scripts\python.exe -m pytest tests/ --tb=no -q. All docs updated accordingly. |
| A-13 | Build APP_MGMT.html SPA (REQ-MGMT-002) | P1 | DONE | docs/APP_MGMT.html | Create docs/APP_MGMT.html. Sections: header with env selector + health dot (REQ-ENV-001), environments panel with lifecycle action buttons (REQ-ENV-003), pipeline versions (REQ-VER-002), backups list, Settings / RMB Menu Editor (REQ-RMB-004), prominent “Open App” CTA, “Back to Hub” button. Deep-link support: ?org=X&env=Y. Skin from ?skin= param / localStorage. Inherits Nexus glassmorphism design system. Corresponds to BL29. |
| A-14 | Backend: Environment + RMB API (REQ-ENV-004, REQ-RMB-002) | P1 | DONE | Wormwood/wormwood/api/ | Create DB migrations for _tbl_org_environments and _tbl_org_rmb_items (see NEXUS_LLD.md Sections 16 and 17). Implement 10 environment lifecycle endpoints + GET/PUT rmb-items endpoints. Seed default production environment and 4 system RMB items per org. Corresponds to BL28 + BL31 (Wormwood repo — out of scope for Nexus2 workspace; must be executed from Wormwood). |
| A-15 | Hub Rewire: card click + health dots + RMB menu (REQ-MGMT-001, REQ-ENV-001, REQ-RMB-001) | P1 | DONE | docs/NEXUS_APP.html | In NEXUS_APP.html: (1) Replace enterWorkspace() onclick with navigateToManagement(orgData) on .hub-card main body — card click goes to APP_MGMT.html?org={slug}. (2) Add health dot per card with 10-second poll of /orgs/{slug}/environments/production. (3) Add contextmenu handler on all .hub-card elements: fixed 4 items (Open App / Open Management / Open Orchestrator / View Docs) plus dynamic items fetched from /orgs/{slug}/rmb-items. Dismiss on click-outside or Escape. Corresponds to BL27 + BL30 + BL31. |
| A-16 | User Management Panel — REQ-AUTH-005 (backend + frontend + migration) | P1 | DONE | wormwood/api/routes_auth.py; admin/models.py; admin/migrate_m_nexus_06.py; docs/APP_MGMT.html |
DONE 2026-05-11 — gate_11 S34/35/36 PASS. ISSUE-073 fix (HMAC-signed cookie) code-complete in Wormwood routes_auth.py. Deployment script ACT_deploy_engine_issue073.py ready, awaiting user approval. Documentation chain (steps 1–7) complete 2026-05-11, commit 10d7026 (Nexus2/main). Backend implemented 2026-05-11, commit 5d77594 (Wormwood/master). Frontend implemented 2026-05-11, commit 3e2b577 (Nexus2/main). engine:10 deployed to ECS nexus-prod 2026-05-11.Backend (routes_auth.py): Add require_nexus_admin decorator. Add GET /auth/users (returns all NexusPlatformUser records). Add PATCH /auth/users/{id}/role (validates nexus_admin|nexus_user, 409 on self-demotion, writes role_updated_at + role_updated_by). Add PATCH /auth/users/{id}/active (409 on self-deactivation, is_active=false blocks OAuth callback with HTTP 403 + account_deactivated).Data model (admin/models.py): Add 3 new fields to NexusPlatformUser: is_active, role_updated_at, role_updated_by.Migration (admin/migrate_m_nexus_06.py): ALTER TABLE _tbl_nexus_platform_users ADD COLUMN for each new field. create_all() does not add columns to existing tables. Frontend (docs/APP_MGMT.html): “Użytkownicy” tab (nexus_admin only). Glassmorphism grid table. Role change confirmation modal (mockup 07b). loadUsers(), openRoleModal(), _submitRoleChange(), patchUserActive() with self-protection guards and toast feedback. Ref: REQ-AUTH-005, AC-005-01..09, BL38, BL39, BL40, NEXUS_LLD.html 7.7–7.9. |
05
Documentation Policy — Rules for All Nexus Docs
P-01No ASCII diagrams. Unicode box-drawing characters (U+2500–U+257F), pipe-and-dash art, and preformatted ASCII flow charts are forbidden in all HTML documents. Use sanctioned HTML diagram components defined in P-07.
P-02All HTML docs must have a functioning site-nav. The nav must use the
site-nav / site-nav-inner / site-nav-brand / site-nav-link class pattern from NEXUS_BACKLOG.html. The nav tag alone without the CSS is a violation.P-03No emojis. Never in any HTML file, template, comment, or inline style. This includes Unicode emoji ranges U+1F300–U+1F9FF and common single-char symbols used decoratively.
P-04Status pills must be accurate.
pill-green COMPLETE means: UI built, backend built, tested, demo-able. API-only work uses pill-warn BACKEND ONLY. CLI-only work uses pill-warn CLI ONLY. Not started uses pill-err NOT STARTED. A claimed status that cannot be demonstrated is a lie and must be corrected.P-05File naming. Nexus platform docs:
NEXUS_*.html. Use case docs: NEXUS_USECASE_*.html. Old Nexus rule engine docs: NEXUS_*.html or unchanged legacy names. Never name a new doc with the Nexus prefix for Nexus platform content.P-06Product naming. The product is Nexus. The underlying rule engine component is Nexus. The product was formerly known as Nexus before it absorbed Nexus capabilities and took the Nexus name. Every doc must clearly refer to Nexus as the product and Nexus as the rule engine component.
P-07Sanctioned diagram type. The only permitted diagram is a
<div class="ww-diagram" data-wwd="[id]"> node graph backed by ww-diagram.js. Data in a <script type="application/json"> block. The .flow-diagram CSS class is forbidden — zero tolerance. See NEXUS_DOC_POLICY.html P-07 for the full schema reference.P-08Cross-doc links. Every doc must link back to
index.html. Use case docs must link to the parent product plan. Backlog and action plan must be cross-linked. No orphaned documents.P-09Color tokens. Only
:root CSS variable colors from the active Nexus theme. Never hardcoded hex colors outside of :root. Use-case accent colors: blue (#4F8EF7) for Nesto, purple (#A78BFA) for ENDO, orange (#F28C28) for ARC. These are fixed and must not change between documents.P-10Version tags. Every document must have a version tag or date in the header. When content changes, update the date. Never leave a stale date when making content edits.
06
Documentation Sitemap
Strategy
NEXUS_PRODUCT_PLAN.htmlMaster product plan, roadmap, use cases, stack
NEXUS_LEAFLET.htmlOne-page product overview
NEXUS_EXEC_BRIEF.htmlExecutive summary for commercial conversations
Architecture
NEXUS_HLD.htmlHigh-level design, four-scale model
NEXUS_WBS.htmlWork breakdown structure
WORMWOOD_APP.htmlCanvas interaction architecture (old Nexus graph editor)
architecture.htmlNexus rule engine architecture
data-model.htmlData model reference
Use Cases
NEXUS_USECASE_NESTO.htmlUC1: Nesto UAE worker onboarding
NEXUS_USECASE_ENDO.htmlUC2: ENDO AI three pipelines
NEXUS_USECASE_ARC.htmlUC3: ARC freelance CRM pipelines
Platform
NEXUS_BACKLOG.htmlNode implementation backlog BL01-BL16
NEXUS_ACTION_PLAN.htmlThis file: audit, ordered actions, policy
NEXUS_DOC_POLICY.htmlDocumentation standards P-01–P-12
NEXUS_DOC_HIERARCHY.htmlDocument authority hierarchy: 6-tier conflict resolution, complete registry
ORCHESTRATION_PLAN.htmlM-ORCH milestone spec: orchestration platform, multi-tenant data model, node taxonomy
ROADMAP_IDEAS.htmlEngineering ideas backlog feeding milestone planning
architecture.htmlNexus rule engine architecture reference
data-model.htmlNexus data model reference
production-readiness.htmlNexus production readiness reference
07
Use Case Pipeline Diagrams — ww-diagram Format (P-19)
Canonical diagrams for all three use case pipelines. Pattern: <div class="ww-diagram" data-wwd="[id]">
backed by a <script type="application/json" id="[id]"> data block and ww-diagram.js.
The .flow-diagram CSS pattern is deprecated and forbidden (P-19).
See NEXUS_DOC_POLICY.html for the full ww-diagram schema reference.
UC1 — Nesto: UAE Worker Onboarding (9 Nodes)
Form Node
Create Worker
HR Admin variant. ChameleonV2. Name, Nationality, Passport, VisaType.
→
Form Node
Upload Documents
Submitter variant. DocumentReference BDT. Passport, Medical, POLO.
→
OCR Node
Atlas OCR Extract
Passport, Medical, POLO fields extracted. Written to entity payload.
→
Validate Node
Nexus Compliance
17 rules. Passport expiry, medical validity, POLO if PH. PASS or FAIL+errors.
→
Store Node
deltaPrism Write
NestoWorker entity. All fields + doc refs. Returns entity_id.
→
Human Gate
HR Manager Review
Reviewer ChameleonV2 variant. Decision: Approve / Reject / More Info.
→
Store Node
Record Decision
Decision + reviewer ID + timestamp written to worker entity.
→
Notify Node
Worker Notification
Email + SMS. Reference number, next steps.
→
Forward Nodes ×3
Gov API (Parallel)
MoHRE Work Bundle. eMigrate (if IN). POLO/OFW (if PH). Parallel. All three green = run complete.
UC2-1 — ENDO Marcin: Lead Qualification
Scheduler Trigger
SMS Lead Poll
Cron-style. Polls inbound SMS inbox. Emits lead payload.
→
Form Node
Lead Capture Form
ChameleonV2. Auto-populated from SMS body fields.
→
AI Transform
Marcin Qualify
Claude API. System prompt: lead qualification. Output: interest score, intent, recommended slot.
→
Validate Node
Nexus Check
Required fields present. Score threshold met. Phone format valid.
→
Store Node
CRM Entry
Lead entity to deltaPrism. Class: MarcinLead.
→
SMS Reply Node
Confirm Appointment
Mock SMS. Template: name, slot, reference. Canvas shows Notify green.
UC2-2 — ENDO Irena: Document Lifecycle
Form Node
Document Upload
ChameleonV2. DocumentReference BDT field. Client uploads file.
→
OCR Node
Irena OCR
Atlas OCR. Extract type, dates, amounts, parties from document.
→
AI Transform
Categorise
Claude: classify as Invoice / Contract / ID / Medical / Other. Output: category + confidence.
→
Human Gate
Low-Confidence Review
Only if confidence < 0.85. Reviewer confirms or overrides category.
→
Store Node
File to deltaPrism
IrenaDocument entity. Category, dates, file ref, confidence.
→
Email Forward
Forward Categorised
SMTP. Category + summary in subject. Document attached. Sent to configured recipient.
UC2-3 — ENDO Przemek: CEO Briefing
Ingest Node
Voice Note Ingest
HTTP pull or file drop. wav/mp3. Written to run context as file ref.
→
AI Transform (Voice)
Transcribe
STT (Whisper API). Output: transcript text written to run context.
→
AI Transform (Text)
Summarise
Claude. System prompt: extract action items, decisions, owners. Output: briefing JSON.
→
Human Gate
CEO Confirm
CEO reviews briefing. Approves or edits before distribution. ChameleonV2 form.
→
Email Forward
Distribute to Team
Action items emailed to owners. CEO approval timestamp logged.
UC3-1 — ARC: Email Ingest + AI Indexing
Scheduler Trigger
Gmail Fetch (Daily)
Cron. Pull new emails via Gmail OAuth. Emit batch to run context.
→
AI Transform
Sentiment + Index
Claude. Classify: lead / follow-up / invoice / spam. Sentiment score. Extract entities.
→
Validate Node
Nexus Check
Required fields. Category in allowed enum. No duplicates (ARC PostgreSQL check).
→
Store Node
deltaPrism + ARC DB
ArcEmail entity to deltaPrism. Indexed record to ARC PostgreSQL.
UC3-2 — ARC: Offer Pipeline
Form Node
Project Brief Form
ChameleonV2. Freelancer fills project scope, tech, timeline, budget.
→
AI Transform
Claude Offer Draft
Claude generates offer text from project brief. D-05 resolved: real Claude key.
→
Human Gate
Freelancer Review
Freelancer edits or approves draft before send.
→
PDF Generator
Render PDF
WeasyPrint / Puppeteer. Offer HTML template + run context fields.
→
Email Forward
Send to Client
PDF attached. Personalised subject. SMTP or SendGrid.
UC3-3 — ARC: Invoice + Bank Match
Ingest Node
Bank CSV Ingest
CSV pull from bank export file. Normalise to BankRow entity schema.
→
Transformer Node
Normalise
Date, amount, currency format standardisation. JSONata mapping.
→
Validate Node
Nexus Match
Match bank row to ARC invoice by amount + date proximity. Flag unmatched rows.
→
Store Node
deltaPrism Write
Matched invoice entities. Audit trail per row.
→
Report Generator
Tax Report CSV
Aggregate matched rows. Polish tax report format. Forwarded via Email Forward.