ideogram-prod-checklist
Ideogram Production Readiness Gate
Overview
Produce a fail-closed release decision for an Ideogram integration. A visually successful test is only one signal; production readiness also requires owned billing, secure credentials, bounded capacity, moderation, durable assets, async reconciliation, telemetry, and a tested rollback.
Prerequisites
- Immutable release SHA, target environment, change owner, approver, and deployment window.
- Current architecture, endpoint inventory, tests, SLOs, budgets, retention, and incident runbook.
- Staging parity and a synthetic canary that contains no customer-derived content.
Current Contract
Live API calls require accepted terms, payment method, positive prepaid credit, and a valid Api-Key. Generation routes differ by endpoint and sync or async lifecycle. Safety is item-level, image URLs expire, and default capacity is documented as 10 in-flight requests.
Authentication
Confirm a target-environment secret reference, server-only injection, correct Api-Key header, scoped application authorization, and exercised revocation. Never place a real key in the release artifact or checklist evidence.