The installation flow
1
Verify the release package
Checksums and cosign signature — supply-chain integrity before anything runs.
2
Prepare the cluster
Namespaces, secrets, storage per the prerequisites.
3
Deploy datastores and streaming layer
Or attach existing estate services — no rip-and-replace.
4
Deploy ORCA services and the control tower
Self-monitoring is installed with the platform, not after it.
5
Connect the first source and validate the healthy shape
Event volume must decrease monotonically across stages before a second source is added.