alchemy-prod-checklist

# Alchemy Production Checklist ## Pre-Launch Checklist ### API & Infrastructure - [ ] API key restricted to production domains in Alchemy Dashboard - [ ] Separate Alchemy apps for dev/staging/prod environments - [ ] Rate limit headroom verified (< 70% of CU/sec budget) - [ ] Retry logic with exponential backoff implemented - [ ] Error monitoring configured (Sentry, Datadog, etc.) - [ ] Webhook endpoints HTTPS-only with signature verification ### Security - [ ] API key NOT in frontend code — proxied through backend - [ ] Private keys in secret manager (not env files) - [ ] All user-supplied addresses validated and checksummed - [ ] No `console.log` of sensitive data in production builds - [ ] npm audit clean — no critical vulnerabilities ### Smart Contracts (if applicable) - [ ] Contracts audited by reputable firm - [ ] Deployed and verified on Etherscan/Polygonscan - [ ] Admin keys secured in multi-sig wallet - [ ] Emergency pause function tested ### Performance - [ ] Response caching for frequently-queried data (balances, metadata) - [ ] Connection pooling for provider instances - [ ] Batch requests where possible (NFT metadata, balances) - [ ] WebSocket reconnection logic for real-time subscriptions ### Validation Script ```typescript // src/prod/readiness.ts import { Alchemy, Network } from 'alchemy-sdk'; async function checkReadiness(): Promise<void> { const checks: Array<{ name: string; pass: boolean; detail: string }> = []; // 1. API connectivity const al...