Decision 1: What are you monitoring?
The first question determines your signal type.Decision 2: Do you need real-time alerting?
This determines your mode.- Yes — use Streaming
- No — use Batch
You need to react while conditions are developing. The workflow executes on every detection update.Trade-offs:
- Higher processing volume (hundreds of executions per track)
- Can alert while the event is still happening
- Required for zone state monitoring
- Must handle event closure separately (close path on the orchestrator)
Decision 3: Which check node?
Based on your signal type, choose the appropriate check node(s):For Track State
These can be composed together — chain multiple check types and the Event Orchestrator evaluates them with AND or OR logic.

