exa-prod-checklist

# Exa Production Checklist ## Overview Complete checklist for deploying Exa search integrations to production. Covers API key management, error handling verification, performance baselines, monitoring, and rollback procedures. ## Pre-Deployment Checklist ### Security - [ ] Production API key stored in secret manager (not env file) - [ ] Different API keys for dev/staging/production - [ ] `.env` files in `.gitignore` - [ ] Git history scanned for accidentally committed keys - [ ] API key has minimal scopes needed ### Code Quality - [ ] All tests passing (unit + integration) - [ ] No hardcoded API keys or URLs - [ ] Error handling covers all Exa HTTP codes (400, 401, 402, 403, 429, 5xx) - [ ] `requestId` captured from error responses - [ ] Rate limiting/exponential backoff implemented - [ ] Content moderation enabled (`moderation: true`) for user-facing search ### Performance - [ ] Search type appropriate for latency SLO (`fast`/`auto`/`neural`) - [ ] `numResults` minimized per use case (3-5 for most) - [ ] `maxCharacters` set on text and highlights - [ ] Result caching enabled (LRU or Redis) - [ ] Request queue with concurrency limit (respect 10 QPS default) ### Monitoring - [ ] Search latency histogram instrumented - [ ] Error rate counter by status code - [ ] Cache hit/miss rate tracked - [ ] Daily search volume tracked (for budget) - [ ] Alerts configured for latency > 3s, error rate > 5% ## Deploy Procedure ### Step 1: Pre-Flight Verification ```bash set -euo pipef...