Flexport Production Readiness Gate

Overview

A checklist item passes only with a receipt tied to the immutable release and configuration. Read access, bookings, trade records, and webhook processing have different risk boundaries and must be approved separately.

Prerequisites

• Immutable release SHA and environment manifest
• Named technical, security/data, and business approvers
• Read-only canary, reconciliation plan, incident owner, and rollback

Instructions

Step 1: Gate identity and auth

Verify account, credential alias/type, endpoint resources, token caching, secret injection, revocation, and MCP role permissions where used.

Step 2: Gate contracts