Comprehensive production readiness certification covering quality gates, release checklists, chaos/resilience testing, rollback validation, observability verification, and go/no-go decision frameworks. Use before any production deployment.
Purpose: Certify that a release meets all quality, security, performance, and operational criteria for production deployment. Scope: Quality gates, release checklists, chaos testing, rollback validation, observability, go/no-go decisions.
Production readiness task?
+-- Pre-release certification?
| +-- All tests passing? -> Run quality gate pipeline
| +-- Security scans done? -> Check SAST, SCA, secret scan results
| +-- Performance validated? -> Run smoke load test against staging
+-- Rollback validation?
| +-- Database migrations? -> Test expand-contract rollback
| +-- Stateless deploy? -> Verify previous image redeploy
| +-- Feature flags? -> Test flag disable path
+-- Chaos / resilience testing?
| +-- Upstream dependency failure? -> Inject latency and 5xx errors
| +-- Infrastructure failure? -> Simulate pod kill, network partition
| +-- Data store failure? -> Test connection drop and recovery
+-- Go/no-go decision?
+-- Score all categories -> Use weighted decision matrix
+-- Any category below 3? -> NO-GO, remediate first
+-- Total >= 4.0? -> GO with documented risks
MANDATORY - All must pass before production deployment
[_] Unit tests: 100% pass, >= 80% coverage
[_] Integration tests: 100% pass
[_] E2E tests: >= 95% pass rate
[_] SAST scan: 0 critical/high findings
[_] Dependency scan: 0 critical/high CVEs
[_] Secret scan: 0 findings
[_] Performance: P95 latency within SLA
[_] Accessibility: WCAG 2.1 AA compliant
[_] API contracts: All consumer contracts verified
[_] Database migrations: Tested forward and rollback
MANDATORY - Operational requirements
[_] Monitoring dashboards configured
[_] Alerting rules active (P1/P2 alerts)
[_] Log aggregation working
[_] Health check endpoints responding
[_] Runbook updated for new features
[_] Rollback procedure documented and tested
[_] Feature flags configured (if applicable)
[_] On-call rotation scheduled
[_] Communication plan ready (stakeholders notified)
[_] Backup strategy verified
MANDATORY - Documentation requirements
[_] API documentation updated (OpenAPI/Swagger)
[_] Changelog updated with release notes
[_] Architecture diagrams current
[_] Known issues documented
[_] Deployment guide updated
[_] Configuration changes documented