05 / Launch checklist
Check before you launch
Complete these checks in the actual deployment environment. A successful build, a successful login, and a fully verified integration are separate milestones.
Identity and sessions
- Login, callback validation, and restoration after a page refresh work correctly.
- Expired authorization, invalid sessions, and network errors offer a clear next action.
- Logout scopes, including the current session and selected device sessions, match the implemented policies.
- Multiple browsers and mobile clients are tested by their registered client types, without unintentionally ending other sessions.
Permissions and APIs
- Access boundaries work correctly across roles, tenants, and unauthorized accounts.
- The server validates identity and permissions; frontend menus are not the only control.
- API errors, rate limits, and timeouts provide clear feedback; retries do not duplicate business operations.
- Private files use authorized access paths, and the frontend does not expose service credentials.
Experience and delivery
- Desktop, mobile, light and dark themes, and keyboard operation are verified.
- The interface respects reduced-motion preferences, and loading and error states remain usable.
- Type checks, tests, and production builds pass, and the dependency lockfile makes installation reproducible.
- Deep links, static assets, and caching are verified after deployment, and a rollback version is retained.