openrouter-prod-checklist

# OpenRouter Production Checklist ## Overview A comprehensive production readiness checklist for OpenRouter integrations covering security, reliability, observability, cost management, and operational procedures. Each item includes the specific API endpoint or configuration needed to verify compliance. ## Security Checklist ```python SECURITY = { "api_key_storage": { "check": "API keys stored in secrets manager (not .env files on disk)", "verify": "grep -r 'sk-or-v1-' --include='*.py' --include='*.ts' . | grep -v node_modules", "pass": "Zero matches", }, "key_rotation": { "check": "Keys rotated on 90-day schedule", "verify": "Check key creation dates in OpenRouter dashboard", "api": "GET /api/v1/keys (management key)", }, "credit_limits": { "check": "Per-key credit limits set to isolate blast radius", "verify": "curl -s https://openrouter.ai/api/v1/auth/key -H 'Authorization: Bearer $KEY' | jq '.data.limit'", "pass": "Non-null limit value", }, "secret_scanning": { "check": "CI pipeline includes secret scanning (gitleaks, trufflehog)", "verify": "Check CI config for secret scanning step", }, "https_enforced": { "check": "All requests use https://openrouter.ai/api/v1", "verify": "Grep codebase for 'http://openrouter' (should be zero)", }, } ``` ## Reliability Checklist ```python RELIABILITY = { "fallback_models": { "ch...