DEPLOYMENT REVIEW CHECKLIST
Innovate with Ajay | Quick-start companion

Release: ___________________ Reviewer: ___________________ Date: _________

FUNCTIONALITY
[ ] Core journeys work with real expected inputs.
[ ] Empty, loading, error and success states are understandable.
[ ] No success message appears before the external action succeeds.
[ ] Broken links, downloads and navigation have been checked.

APPLICATION SECURITY
[ ] Secrets remain server-side and outside version control.
[ ] Input validation runs on the server.
[ ] Authentication and authorization are tested separately.
[ ] Output is safely encoded or escaped.
[ ] External requests use trusted destinations.
[ ] Abuse controls are appropriate for public endpoints.

QUALITY
[ ] Mobile and keyboard operation work.
[ ] Focus is visible and form labels are present.
[ ] Images have appropriate alternative text.
[ ] Performance is measured on representative pages.
[ ] Metadata, canonicals, sitemap and redirects are correct.

AI-SPECIFIC CHECKS (WHEN RELEVANT)
[ ] Representative quality tests are recorded.
[ ] Untrusted retrieved content cannot authorize tool actions.
[ ] Consequential actions require appropriate review.
[ ] Timeouts, spending limits and fallback behaviour are defined.

OPERATIONS
[ ] Production configuration is documented.
[ ] Data migrations and backups have an owner.
[ ] Logs avoid unnecessary personal information.
[ ] Rollback has been tested or reviewed.
[ ] An incident contact and monitoring process are defined.
[ ] Known limitations are documented for the operator.

This is a starting point, not a comprehensive security certification.
https://innovatewithajay.com/contact