nexart.iodocs

    Governed Execution Production Checklist

    Operational checks before and after deploying governed execution evidence, plus safe credential handling for partner testing against the production Node.

    Before deployment

    • Pin exact SDK versions.
    • Verify lockfile integrity.
    • Run positive and adversarial topology tests.
    • Verify root and deployment artifacts use the same version.
    • Confirm no secrets exist in fixtures.
    • Build the production container.
    • Confirm the rollback revision.

    After deployment

    • Check /health.
    • Check /version (serviceVersion, governedExecutionSdkVersion).
    • Check Node discovery and activeKid.
    • Submit one small authenticated test CER.
    • Verify the receipt and envelope independently.
    • Replay the same request to confirm idempotency.
    • Run stateless positive and negative cases.
    • Revoke the temporary key.
    • Inspect logs and error metrics.
    • Verify public visibility separately if public publication is intended.

    Partner testing

    • State clearly whether the endpoint is staging or production.
    • Use a short-lived, least-privilege key.
    • Send it through a secure secret-sharing channel.
    • Set an expiry.
    • Revoke it immediately when testing ends.
    • Label test evidence.
    • Avoid load or quota testing on production.