documenso-prod-checklist

# Documenso Production Checklist ## Overview Complete checklist for deploying Documenso integrations to production, covering security, reliability, monitoring, and compliance readiness. ## Prerequisites - Staging environment tested and verified - Production API keys available - Deployment pipeline configured (see `documenso-ci-integration`) - Monitoring ready (see `documenso-observability`) ## Production Checklist ### 1. Authentication & Secrets - [ ] Production API key generated (not staging key) - [ ] API key stored in secret manager (Vault, AWS Secrets Manager, not `.env`) - [ ] Webhook secret configured and verified - [ ] Key rotation procedure documented - [ ] Old/unused keys revoked - [ ] Self-hosted: secrets generated with `openssl rand -hex 32` - [ ] Self-hosted: signing certificate from trusted CA mounted ### 2. Error Handling - [ ] All API calls wrapped in try/catch with typed errors - [ ] Exponential backoff for 429/5xx responses - [ ] Circuit breaker for Documenso outages - [ ] User-friendly error messages (no raw API errors exposed) - [ ] Error tracking integration (Sentry, Datadog, etc.) ### 3. Performance - [ ] Singleton client pattern (not creating new client per request) - [ ] Templates used for repetitive document creation - [ ] Bulk operations use concurrency control (p-queue) - [ ] Background processing for non-critical operations (Bull/BullMQ) - [ ] Document metadata cached (completed documents immutable) ### 4. Monitoring & Alerting - [ ] Health...