deployment-auditlisted

# Deployment Audit ## Checklist 1. **Build** — reproducible install/build; lockfile respected; Node/Python version pinned. 2. **Env** — required secrets listed; no secrets in git; preview vs prod separation. 3. **Hosting** — correct runtime, headers, redirects, asset caching, SPA fallback if needed. 4. **CI** — typecheck/lint/test on PR; deploy only on green; artifact retention. 5. **Rollback** — one-command or one-click rollback path documented. 6. **Observability** — error tracking, basic logs, health route if applicable. 7. **Perf/cost** — cold start, bundle size, image CDN, region choice. 8. **Safety** — destructive migrations gated; feature flags for risky cuts. ## Output Severity-ordered findings + a go/no-go line + the smallest path to “go”.