Go-live checklist

Security

• Client secrets are stored on the server, never in browser or mobile code.
• Tokens are cached and renewed shortly before they expire.
• X-Tenant-ID is set on every request and matches the token.
• Users get only the roles they need. See Roles and permissions.

Chat

• Instance IDs are read from GET /v1/instances or configuration, not hard-coded in many places.
• chat_id, message_id and message IDs are set on every chat request. See Sessions.
• Stored session state is deleted when users delete a conversation.
• Streaming clients ignore unknown event types.
• replace events and guardrail refusals replace the displayed text.
• Approval requests are shown to the user and answered. See Streaming events.
• Results are returned for every external tool call.
• Users can rate answers. See Feedback.

Data

• Document IDs are stable and derived from the source document. See Ingestion best practices.
• Datasources are restricted to the roles that need them.
• Deleted source documents are also deleted from the datasource.

Operations

• Retries with backoff are in place for 429 and 5xx. See Errors and limits.
• Monitoring calls the health endpoint of the agents you use.
• Changes to agents are tested in a test deployment before production.