Launch cutover checklist
What “done” means before anyone flips live
Dry-run proof
- Wrong secret rejected
- buy / sell / close accepted with visible status or logs
- Venue account unchanged while dry-run is on
- Body oversize and rapid repeats do not take the process down
Edge
- TLS in front
- Webhook secret set
- Rate limit on webhook route
- Request body cap
- Admin path separate from webhook path
Ops
- Restart command documented
- Log location documented
- Kill switch documented
- Secret rotation steps written
Only then (Desk)
- Size caps agreed
- First live session supervised
- Stop / protect path confirmed on venue after first entry