shipping-and-launch

1# Shipping and Launch
2 
3## Overview
4 
5Ship with confidence. The goal is not just to deploy — it's to deploy safely, with monitoring in place, a rollback plan ready, and a clear understanding of what success looks like. Every launch should be reversible, observable, and incremental.
6 
7## When to Use
8 
9- Deploying a feature to production for the first time
10- Releasing a significant change to users
11- Migrating data or infrastructure
12- Opening a beta or early access program
13- Any deployment that carries risk (all of them)
14 
15## The Pre-Launch Checklist
16 
17### Code Quality
18 
19- [ ] All tests pass (unit, integration, e2e)
20- [ ] Build succeeds with no warnings
21- [ ] Lint and type checking pass
22- [ ] Code reviewed and approved
23- [ ] No TODO comments that should be resolved before launch
24- [ ] No `console.log` debugging statements in production code
25- [ ] Error handling covers expected failure modes
26 
27### Security
28 
29- [ ] No secrets in code or version control
30- [ ] The ecosystem's dependency audit (`npm audit`, `pip-audit`, `cargo audit`, ...) shows no critical or high vulnerabilities
31- [ ] Input validation on all user-facing endpoints
32- [ ] Authentication and authorization checks in place
33- [ ] Security headers configured (CSP, HSTS, etc.)
34- [ ] Rate limiting on authentication endpoints
35- [ ] CORS configured to specific origins (not wildcard)
36 
37### Performance
38 
39- [ ] Core Web Vitals within "Good" thresholds
40- [ ] No N+1 queries in critical paths
41…