9.5 Checksum / Integrity Considerations

Orbnetes deployment and release orchestration documentation for operators and platform teams.

Artifact integrity is critical for reliable deployment.

Recommended integrity controls:

  • store and display checksum (for example SHA-256) per artifact.
  • verify checksum consistency between producer and deploy consumer.
  • avoid mutable artifact replacement under same version label.

Operational guidance:

  • treat artifact as immutable once released.
  • if artifact content changes, publish a new version/tag.
  • keep source of truth for checksums in CI release output.
  • when using internal storage, capture checksum at upload and display it in UI.

Why integrity controls matter:

  • prevent accidental file mismatch,
  • reduce risk of tampering/supply-chain drift,
  • improve confidence during rollback and incident response.

Practical Operator Checklist

Before launching a production release:

  1. Confirm correct source type is selected.
  2. Confirm expected tag/version is selected.
  3. Confirm release file name matches deploy intent.
  4. Confirm checksum (if available) matches CI/release record.
  5. Confirm pipeline blueprint expects and uses ORBN_RELEASE_FILE correctly.

This checklist prevents most source-selection deployment mistakes.