onenote-prod-checklist

# OneNote Production Checklist ## Overview OneNote integrations that work perfectly in development break in production in predictable ways: SharePoint document libraries exceed the 5,000-item view threshold and stop returning notebooks, image uploads silently truncate above 4MB, rate limits compound across users during business hours, and MSAL token caches lose state across container restarts. This skill is a comprehensive go/no-go checklist organized by failure category. Each item references the specific Graph API behavior that causes the production failure and provides the fix. Use this checklist during launch reviews — every unchecked item is a production incident waiting to happen. ## Prerequisites - A functional OneNote integration that works in development/staging - Azure AD app registration with delegated permissions configured - Access to production monitoring infrastructure (logging, alerting) - Familiarity with your deployment environment (containers, VMs, serverless) - Completed `onenote-security-basics` and `onenote-rate-limits` skills ## Instructions ### 1. Authentication Checklist | # | Check | Why it matters | |:-:|-------|---------------| | 1.1 | Using delegated auth (DeviceCodeCredential or InteractiveBrowserCredential) | App-only auth (ClientSecretCredential) deprecated for OneNote March 31, 2025 | | 1.2 | MSAL token cache serialized to persistent storage | Container restarts lose in-memory cache; users forced to re-authenticate | | 1.3 | Silent token...