deepgram-prod-checklist

# Deepgram Production Checklist ## Overview Comprehensive go-live checklist for Deepgram integrations. Covers singleton client, health checks, Prometheus metrics, alert rules, error handling, and a phased go-live timeline. ## Production Readiness Matrix | Category | Item | Status | |----------|------|--------| | **Auth** | Production API key with scoped permissions | [ ] | | **Auth** | Key stored in secret manager (not env file) | [ ] | | **Auth** | Key rotation schedule (90-day) configured | [ ] | | **Auth** | Fallback key provisioned and tested | [ ] | | **Resilience** | Retry with exponential backoff on 429/5xx | [ ] | | **Resilience** | Circuit breaker for cascade failure prevention | [ ] | | **Resilience** | Request timeout set (30s pre-recorded, 10s TTS) | [ ] | | **Resilience** | Graceful degradation when API unavailable | [ ] | | **Performance** | Singleton client (not creating per-request) | [ ] | | **Performance** | Concurrency limited (50-80% of plan limit) | [ ] | | **Performance** | Audio preprocessed (16kHz mono for best results) | [ ] | | **Performance** | Large files use callback URL (async) | [ ] | | **Monitoring** | Health check endpoint testing Deepgram API | [ ] | | **Monitoring** | Prometheus metrics: latency, error rate, usage | [ ] | | **Monitoring** | Alerts: error rate >5%, latency >10s, circuit open | [ ] | | **Security** | PII redaction enabled if handling sensitive audio | [ ] | | **Security** | Audio URLs validated (HTTPS, no private IPs) | [ ]...