Deployment checklist

Access

• [ ] Production tenant id confirmed
• [ ] API base URL allowlisted from application networks
• [ ] Tokens scoped least-privilege; admin tokens limited to break-glass roles
• [ ] Secret storage excludes application repositories

Configuration

• [ ] Cycle stages agreed with process owners
• [ ] Channel taxonomy frozen for launch cohort
• [ ] Required fields documented per stage
• [ ] CRM mirror direction documented (if applicable)

Verification

• [ ] whoami succeeds from production app runtime
• [ ] Create → advance → read path exercised on a canary opportunity
• [ ] Explanations returned when requested on decision-facing reads
• [ ] Webhook retries and dead-letter handling tested

Operations

• [ ] On-call ownership for API 5xx and webhook failures
• [ ] Version pin recorded against Release notes
• [ ] Contact path known for tenant support

Pair with Implementation guide and Installation.

Document only — no binary attachment in this phase.