15 - Production Checklist

Use this before every release.

Architecture

[ ] Clear boundary between UI and trusted backend
[ ] Commands are small, typed, and validated
[ ] Shared state is thread-safe and test-covered

Security

[ ] Least-privilege permissions configured
[ ] CSP is strict and reviewed
[ ] Path/shell inputs validated and constrained
[ ] Secrets and signing keys stored securely

Quality

[ ] Unit/integration/E2E tests are passing
[ ] Crash and error paths are exercised
[ ] Logs are useful but do not leak sensitive data

Release

[ ] Version bump + changelog complete
[ ] Signed artifacts generated for target OSes
[ ] Update metadata and rollback plan verified
[ ] Install/uninstall smoke tests completed

Maintenance

[ ] Dependency update policy defined
[ ] Security patch SLA defined
[ ] Support/bug-report workflow documented