palantir-prod-checklist

# Palantir Production Checklist ## Overview Complete go-live checklist for deploying Foundry-integrated applications to production. Covers credential management, health checks, monitoring, and rollback procedures. ## Prerequisites - Staging environment tested and verified - Production OAuth2 credentials from Developer Console - Deployment pipeline configured - Monitoring infrastructure ready ## Instructions ### Pre-Deployment: Credentials & Config - [ ] OAuth2 client credentials in secrets manager (not personal tokens) - [ ] Scopes are minimal: only what the app actually needs - [ ] `FOUNDRY_HOSTNAME` points to production enrollment - [ ] Separate credentials from staging (not shared) - [ ] Credential rotation schedule documented (90-day max) ### Code Quality - [ ] All tests passing including Foundry integration tests - [ ] No hardcoded hostnames, tokens, or RIDs - [ ] Error handling covers all Foundry `ApiError` status codes - [ ] Rate limiting with exponential backoff implemented - [ ] Logging uses structured format (JSON) with request IDs ### Infrastructure - [ ] Health check endpoint verifies Foundry connectivity ```python @app.get("/health") async def health(): try: client.ontologies.Ontology.list() return {"status": "healthy", "foundry": "connected"} except foundry.ApiError as e: return {"status": "degraded", "foundry": f"error_{e.status_code}"} ``` - [ ] Circuit breaker pattern for Foundry API calls - [ ] Graceful degradation when ...