salesforce-prod-checklist

# Salesforce Production Checklist ## Overview Complete checklist for deploying Salesforce integrations to production, including sandbox validation, API limit planning, and rollback procedures. ## Prerequisites - Staging/sandbox environment tested and verified - Production Connected App configured - Dedicated integration user in production - Monitoring and alerting ready ## Instructions ### Pre-Deployment Configuration - [ ] Production Connected App has minimum OAuth scopes (not `full`) - [ ] Dedicated integration user with restricted profile (not admin) - [ ] SF_LOGIN_URL set to `https://login.salesforce.com` (not `test.salesforce.com`) - [ ] All credentials stored in vault/secrets manager (not env files) - [ ] IP restrictions configured on Connected App and user profile - [ ] JWT certificate uploaded (if using JWT Bearer flow) ### API Limit Planning - [ ] Estimated daily API calls documented - [ ] API limit headroom > 20% (`GET /services/data/v59.0/limits/`) - [ ] Bulk API used for operations > 200 records - [ ] Composite API used for multi-object transactions - [ ] sObject Collections used for batch CRUD (max 200/call) - [ ] Caching implemented for describe/metadata calls ### Code Quality - [ ] All SOQL queries use parameterized filters (no injection) - [ ] Error handling covers Salesforce error codes (`INVALID_FIELD`, `REQUEST_LIMIT_EXCEEDED`, etc.) - [ ] Retry logic implemented for transient errors (`UNABLE_TO_LOCK_ROW`, `SERVER_UNAVAILABLE`) - [ ] No hardcoded Sale...