Skip to main content
Every ORCA deployment passes a gated readiness framework before production. Each gate has defined entry/exit criteria and a named sign-off; sign-off roles span streaming, SRE, deployment, data, schema, and compliance, and the evidence bundle is archived per gate — the audit trail your risk function will ask for later, produced by default.

Shadow mode — six weeks, deliberately

ORCA runs alongside existing operations with no production actions for six weeks, not four: the window must cover month-end, a T1 change window, and off-hours — the real test of suppression correctness. Four weeks can miss a maintenance window entirely. This discipline came out of live banking deployment, not a slide. Full gate criteria, sign-off templates, and the evidence-bundle specification are part of the engagement playbook.