botgumi

Checklists

Go-live checklist

  • Domain registered; DNS on Cloudflare.
  • Cloudflare email routing and sender verified for transactional and waitlist mail.
  • Backend and landing served on the app's domain.
  • Dashboard (ADR-0003): the artifact is private to the owner, the morning task is scheduled, its keys are read-only and in the secrets inventory, and every panel loads or says which source failed.
  • Only if the app chose the web dashboard: served on the app's domain, Cloudflare Access in front of it, Access hostnames recorded.
  • Docs (ADR-0005): pnpm docs:check passes; docs.<domain> is behind Cloudflare Access unless the owner chose public docs, and the docs Worker's workers.dev and preview URLs are off.
  • TestFlight build points at the production API (iOS).
  • Play internal-testing build points at the production API (Android).
  • DATA_MODE=live in production; seed data appears nowhere in production.
  • MIN_APP_VERSION set only at the 1.0 production release, never before.
  • Secrets inventory complete (see secrets-inventory.md).