Go-live checklist

Use this checklist before switching production traffic to live credentials. Run a short canary window in live with low-risk transactions first, then ramp traffic after webhook and reconciliation stability is confirmed.

1. Credentials and access

• Create live API credential in merchant console.
• Confirm live key with /v1/merchant/principal.
• Store secret in production secret manager, never in source control.

2. Webhooks

• Create live webhook endpoint under your production domain.
• Deploy idempotent webhook consumer with duplicate protection.
• Enable signature verification on raw body.

3. Core flow validation

• Create a payment intent end-to-end and confirm webhook receipt.
• Execute a payout with a stable idempotency key.
• Confirm balance and ledger visibility in dashboards.

4. Observability and operations

• Pair with dashboard monitoring and payout failure alerts.
• Alert on webhook failure rate and payout failure statuses.
• Create runbooks for retries and partial incident handling.