Deployment checklist

Access

• [ ] Production tenant id confirmed
• [ ] API base URL allowlisted from application networks
• [ ] Tokens scoped least-privilege; review scopes limited to authorised roles
• [ ] Secret storage excludes application repositories

Configuration

• [ ] Verification types agreed with process owners
• [ ] Document kinds enabled per type documented
• [ ] Remediation outcomes and required docs documented
• [ ] Storage upload path validated for production

Verification

• [ ] whoami succeeds from production app runtime
• [ ] Create → attach → process → review path exercised on a canary case
• [ ] Findings and review returned when requested on reads
• [ ] Failed document processing error path tested

Operations

• [ ] On-call ownership for API 5xx and processing failures
• [ ] Version pin recorded against Release notes
• [ ] Contact path known for tenant support

Pair with Implementation guide and Installation.

Document only — no binary attachment in this phase.