Client Handoff Checklist
One-day production checklist — webhooks, content trust, spam protection, smoke tests, and deploy sign-off.
- handoff
- production
- checklist
Morning — make it work
- Wire production intake — set
PUBLIC_GUIDE_WEBHOOK(and optional GA4) in CI variables; test live contact form - Verify DNS & deploy — custom domain, HTTPS, branded 404, privacy page
- Fix trust content — real testimonials or clear “representative outcomes” labeling; media entries need URLs or removal
Midday — polish & protect
- Spam layer — honeypot minimum on public forms; rate limit webhook server-side
- Analytics decision — GA4 on + consent, or GA4 off entirely
- Smoke test — contact, search, theme, mobile nav, RSS, print résumé if applicable
Afternoon — content & ops
- Blog not empty — at least one recent note if blog is promoted
- CI quality gate — consider
astro checkor equivalent typecheck in pipeline - Update discovery files —
llms.txt, sitemap, agent manifest if public - Final deploy — green CI, live site matches local
End-of-day boxes
- Webhook tested on production
- Testimonials defensible
- Spam protection in place
- Privacy policy live
- Mobile smoke test passed
-
npm run build+ audit clean
Full expanded plan with agent-first maintenance notes: see HANDOFF-DAY-PLAN.md in the davidcolecloud repo.