Customer-zero acceptance

1. 01
   Verify the release bundle

   Checksums, signatures, image digests, compatibility, SBOM and provenance are retained.

2. 02
   Prepare dependencies

   PostgreSQL, artifacts, encryption key, DNS, TLS, time, registry and backup target pass preflight.

3. 03
   Install the control plane

   The chosen Helm or Compose profile reaches /health, /ready and /health/clock.

4. 04
   Bootstrap access

   The first platform administrator can sign in and the permission view matches the intended role.

5. 05
   Connect one lifecycle agent

   Validate, verify-local, heartbeat and N/N-1 compatibility all pass.

6. 06
   Register Hetzner

   A scoped account validates once; discovery and rate-limit posture are visible.

7. 07
   Create a disposable cluster

   The plan is reviewed and the OperationRun reaches a supported terminal state with evidence.

8. 08
   Exercise lifecycle

   Inspect, scale, one-minor upgrade and one node replacement are proven in the test boundary.

9. 09
   Install one add-on

   Artifact locks, preflight, install and semantic health evidence pass.

10. 10
    Open one dashboard safely

    Only an approved healthy direct-public posture is used; brokered SSO remains gated.

11. 11
    Run Sonobuoy

    Quick or approved non-disruptive validation produces immutable reports and cleanup evidence.

12. 12
    Restore ClusterPilot

    Database, artifacts and the separately protected master key restore into a clean target and verify.

Progress is stored only in this browser. It is not production evidence; attach the real OperationRun, artifact and approval identifiers to your change record.