Production validation checklist

Complete this checklist before changing production DNS.

Deployment

• Expected source commit deployed
• Deployment environment is Production
• Deployment reached Ready
• Deployment is Current (or promotion plan is clear)
• Framework detected correctly
• Build settings match the application
• Required resources were generated
• No unexplained build warnings

Routes and rendering

• Homepage
• Deep links
• Dynamic routes
• Server-rendered routes
• Static routes
• API routes
• Redirects
• Rewrites
• Custom error pages
• Not-found behavior

Authentication and sessions

• Sign in
• Sign out
• Session refresh
• Password reset
• OAuth callbacks (updated for the new hostname)
• Cookie domain and Secure cookie behavior
• CSRF protections
• Authorized and unauthorized routes

Data and integrations

• Database reads and writes
• Object storage and file uploads
• Email
• Webhooks
• Third-party APIs
• Queues and background work
• Scheduled work (external scheduler if used)

Delivery

• Static assets, images, and fonts
• Compression
• Cache headers
• Cache hits and misses (X-Easel-Cache)
• Revalidation
• Streaming
• Large responses

Security

• Platform protections active
• Firewall rules translated, if needed
• Attack Mode disabled unless intentionally needed
• Deployment protection correct for previews
• Security headers
• CORS
• Secrets scoped to Preview vs Production correctly

Domains

• Apex and www / canonical redirect planned
• DNS records recorded
• Mail and verification records preserved
• TLS path understood (cert after DNS points to Easel)
• OAuth and webhook URLs updated
• Canonical URLs, sitemap, and robots behavior correct

Observability

• Requests appear in Logs
• Function activity and Traces appear as expected
• Cache outcomes visible
• Error rate baseline recorded
• Latency / compute baseline recorded

Failure testing

• Missing route
• Application error
• Upstream timeout
• Invalid authentication
• Failed webhook signature
• Function timeout behavior
• DNS rollback procedure rehearsed
• Instant Rollback path understood for post-cutover releases

Acceptance

Record:

Validated deployment ID:
Validated commit:
Validator:
Date:
Known limitations:
Rollback threshold:

Related guides

• Domain cutover
• Migration rollback
• Observability