Canva Production Readiness Gate

Overview

Make go-live an evidence decision tied to an immutable artifact. Preview features, broad scopes, unsafe callback hosts, ambiguous jobs, or unverifiable rollback keep the release closed.

Prerequisites

• Release digest, configuration version, owner, and change scope
• Production integration, exact redirects, explicit scopes, and feature statuses
• Test receipts, migrations, observability, data policy, incident plan, and rollback

Instructions

Step 1: Verify identity and trust

Use Read and Grep to confirm exact artifact, environment, integration ID, callback hosts, backend-only secrets, CI event boundaries, and operator ownership.

Step 2: Verify authorization