Go Live Checklist
Production access is only safe when branding, permissions, verification, callbacks, receipts, reconciliation, and emergency controls are all confirmed.
Required Checks
- No placeholder or demo pages are public.
- Webhook signatures are validated and replay-safe.
- Provider callbacks are verified server-side before money is credited or finalized.
- Receipts, notifications, and reconciliation are working for every active rail.
- KYC and KYB rules block cards, crypto, merchant API, and high-value withdrawals until approval.
- Emergency controls, incident status, and runbooks exist for provider outage, duplicate debit, failed withdrawal, and liquidity shortage scenarios.