Production Readiness Checklist

Use this checklist before enabling a new connector or taking a new customer deployment live.

New connector

• Connector auth is stored through ARX secret management, never plaintext config.
• Supported operations are documented and policy-scoped.
• Error modes are categorized into retryable vs deterministic failures.
• Audit rows and webhook events are emitted for success and failure paths.
• Load-test and smoke-test coverage exists for at least one read and one write path.
• Runbook entry exists for the connector's most likely failure mode.

New customer deployment

• DD_API_KEY, ARXSEC_ENCRYPTION_KEY, and status-page sync secrets are configured.
• /health/components is healthy from the target environment.
• Queue-health and provider-health ops endpoints return data for the tenant.
• SSO/SCIM configuration has been smoke-tested.
• Webhook delivery target has passed signature validation and retry testing.
• DR destination and audit witness bucket are configured and verified.
• Load-test token set exists for staging and the nightly workflow is green.
• Rollout feature flags are confirmed enabled only when the customer is ready.