Production Checklist

Run a structured production readiness checklist covering security, observability, error resilience, performance, scalability, and deployment. This skill scores each area with weights and flags critical blockers like missing authentication, hardcoded secrets, or absent backups.

Include authentication and authorization checks, rate limiting, CORS configuration, error tracking with Sentry, LLM provider failover and cost monitoring, database backups, HTTPS enforcement, and a documented rollback plan. Launch-day items cover health endpoints, alerts, and analytics verification.

The score weights security at 30%, observability and error resilience at 20% each, performance at 15%, scalability at 10%, and deployment at 5%. Scores of 90-100% indicate readiness, while below 60% signals critical unresolved issues.

Yes, it includes privacy and compliance items such as privacy policies, data processing agreements, GDPR, SOC 2, HIPAA, and PCI-DSS. A referenced compliance-detailed.md file provides deeper GDPR, SOC 2, and HIPAA checklists.

Critical blockers are missing authentication, secrets committed in code, no error tracking, no database backups, and no HTTPS. High-priority items include missing rate limiting, monitoring, poor performance, and absent rollback plans.