hex-prod-checklist

# Hex Production Checklist ## Overview Hex is a collaborative data analytics platform where teams build notebooks, dashboards, and scheduled data pipelines. A production integration triggers project runs, retrieves results, and monitors pipeline health via the Hex API. Failures mean stale dashboards, broken scheduled reports, or data pipelines that silently stop producing output for downstream consumers. ## Authentication & Secrets - [ ] `HEX_API_KEY` stored in secrets manager (not config files) - [ ] Token scoped to "Run projects" permission only - [ ] Token expiration set > 90 days with calendar renewal reminder - [ ] Separate tokens for dev/staging/prod workspaces - [ ] Key rotation schedule documented (quarterly cycle) ## API Integration - [ ] Production base URL configured (`https://app.hex.tech/api/v1`) - [ ] Rate limits respected (20 requests/min, 60/hour) - [ ] All orchestrated projects published before triggering runs - [ ] Input parameters documented and validated before submission - [ ] Run status polling with configurable interval (default: 5s) - [ ] Result retrieval handles large datasets (pagination/streaming) - [ ] Project version pinning prevents unexpected behavior changes ## Error Handling & Resilience - [ ] Circuit breaker configured for Hex API outages - [ ] Retry with exponential backoff for 429/5xx responses - [ ] ERRORED and KILLED run states handled with alert + re-queue - [ ] Run timeout detection (alert if run exceeds 2x typical duration) - [...