3.2 Install in three commands

sha256sum -c ada-release-1.3.83.tar.sha256
tar -xf ada-release-1.3.83.tar
cd ada-release-1.3.83 && sudo sh ./install.sh

The installer asks six questions, each with a sensible default:

Question	What to answer
Server address	The DNS name clients and admins will use (`ada.example.com`).
Console bind address	The address the admin console (9443) listens on — all interfaces, or the management interface only.
Management network	The CIDR range allowed to reach the console.
Initial admin password file	A file holding the first `admin` password; empty means one is generated.
Console certificate	Internal CA, your own PEM files, or a CSR to sign later (you can change it any time in 6.3).
Management binding enforcement	How strictly the console port is restricted to the management network.

Unattended: sudo sh ./install.sh --answers answers.env --unattended. Secrets are passed only as file paths.
Read-only checks: --check (prerequisites only) and --dry-run (shows what would happen).
Result: a summary in /opt/ada-classification/.adactl/INSTALL-SUMMARY.txt and a log in /var/log/ada-install.log. Neither contains secrets.
Exit codes: 0 success · 1 error · 2 follow-up work pending · 3 a prerequisite failed and nothing was changed.