# NexusFIX controller capture forwarding from a complete source archive

The generic native controller now enables both peers' admin and production
application capture for local and remote source builds. It validates the
original Logon heartbeat bytes, measured admin windows/counters, bilateral
application identity, FIX framing/checksums and increasing sender sequences.
Each pair retains a separate JSON audit with both role summaries and SHA256
values for all four artifacts. JSON manifests retain those audits; CSV rows
carry the audit status and receipt path. This observation proof is separate
from canonical workload admission.

Missing or invalid evidence fails the owner row. Failed remote artifact copies
also fail it even when valid older files exist locally. Remote collection tries
every peer artifact and retains retrieval failures. For installed DAC binaries,
`--nexusfix-observations` explicitly selects the newer capability; old immutable
generations keep their CLI. A fresh NexusFIX parity grade now requires a passing
observation audit, so an unobserved installed row cannot obtain admission.

## Fresh archive qualification

Tested source **`986c95188e2363c488138725dc5a331625e9683e`** is retained on
`s/codex-fullbench-nexusfix-controller-source-20261003`. Its complete materialized
manifest archive contains **727 files**, including the portable templates. It
has no `.git`, `bench/`, `engine/` or `internal/`; an unrelated Git repository is
created around it to verify that archive identity is not borrowed. The separate
SDK archive supplies **91 unchanged headers** pinned to
`ffa8b0a014b5cb4020ec8a99fe22fa3a24bfc494`.

HP status/process/memory checks precede an outer high-priority `isol` lease on
CPUs 8–17, allowing concurrent shared work. The actual exported controller
builds the SDK-linked driver with Clang 21.1.8/C++23/O3, passes its self-test,
and runs all four tiny TCP pairs with five warmup and twelve measured cycles.
All actual owner sinks match the independent common reference. All **48 primary
samples** and **170 bilateral application frames per peer** are retained.
All four controller observation audits pass, with complete windows and original
thirty-second bilateral Logon proof. No test or check is skipped.

Every archive summary retains `controller_revision=source-archive-unqualified`,
`contract_status=not-audited` and `stage5_status=S5 diag`. The passing observation
audits do not erase the SDK body spelling/order gap or acquire release identity.
The CLI SDK input overrides a deliberately bad environment SDK. Missing
explicit SDK input fails before workspace creation; patched headers and a
changed bound binary reject. Valid SDK receipt reuse passes. All 727 source
files and all 91 SDK headers remain unchanged after execution.

Driver SHA256:
`20446ed9ba3d32cf13e59b3137f1f14ea5cd7f2fc659246ff224e51b0d4bd463`.
The compiled product and the original 52-file evidence copy remain under
`~/archive/libhft/nexusfix-controller-hp-20261003-986c95188e23` on HP. The
repository omits only that executable and retains its original hash.

Local checks pass **104 checks**, with zero skips. They include the actual
remote controller command/collection path with synthetic peers and a failed
retrieval leaving valid stale files in place; the latter correctly fails the
audit. Missing admin/wire data, forged counts, differing bytes, identical but
invalid envelopes and legacy capability selection are checked. These mocks
exercise orchestration without contacting a host; the actual functional pairs
above use localhost. The source comprehensiveness gate passes.

[Sealed actual archive/controller/SDK receipts, admin/application bytes, raw
samples and local orchestration checks](evidence/nexusfix-controller-observations-20261003/SHA256SUMS).

## Integration

After integrating the concurrently published Stage 2 input migration, all
qualified controller, driver, observer, SDK, admin auditor, canonical workload
and shared layout/build/clock inputs remain byte identical. Of the 727 archive
files, 719 remain identical; the eight differences are Stage 2 source/tests,
method guidance, the added remote controller tests and the NexusFIX guide.
The new Stage 2 files are retained separately in the current inventory.
The integrated 104 checks and comprehensiveness gate pass with zero skips.
The current draft selects 728 files, with 147 scrub findings in 37 files,
83 textual source-root escapes and zero dead documentation links. These
inventory counts are a migration worklist, without release admission.

The [integration input map](evidence/nexusfix-controller-observations-20261003/integrated-inputs.json)
pins the publication inputs and records every allowed difference.

## Remaining gates

Controller artifact forwarding now has functional qualification. Full canonical
body alignment and the common OrdType/dictionary choice, physical DAC execution,
report rate/delay/full stability and standalone release admission remain open.
Existing installed hashes, queued generations and historical result grades
are unchanged. Shared clock/build APIs and Stage 2 inputs stay unchanged.