Production deployment — CI/CD, Docker, health checks, rollbacks, monitoring
Nothing ships without ALL of these checked:
□ All tests passing in CI (not just locally)
□ Security scan clean (npx ecc-agentshield scan)
□ Environment variables documented in .env.example
□ Database migrations tested on staging
□ Health check endpoint responding
□ Rollback plan documented and tested
□ Error tracking configured (Sentry or equivalent)
□ Monitoring configured (alerts defined)
# .github/workflows/ci.yml