Go-live checklist

Ten checks between a working sandbox integration and production.

Checklist

Live key (os_live_…) in a secret store; base URL https://api.offendersearch.app; the test key removed from production config.
HTTP timeout ≥ 60 s; 429 waits Retry-After; 5xx retried only on searches without a live block.
The partial branch is handled and never shown as "clear".
Candidates are tiered by matchState and matchConfidence; a human review step exists; nothing auto-declines.
Async searchId persisted on the 202 before anything else; polling or a webhook receiver in place.
meterEvents[] logged where a response carries it (criminal, live sources, documents) and usage reconciled against Dashboard → Usage; expected monthly volume checked against pricing.
The legal.notice respected: no employment, tenant, credit or insurance use.
Retention decided: what you store from a record and for how long; platform history is 14 days.
A BAA executed from the dashboard where your counsel requires one.
A Monitoring plan for screened people, if the answer must stay current.