GA Readiness Checklist

Product Gates

• Advisory burn-in report reviewed for each pilot repo.
• Soft/hard-block enablement decisions documented per repo.
• Override process and owner approvals documented.

Reliability Gates

• Event ingestion success >= 99.5% over trailing 14 days.
• Queue retry/DLQ rates within SLO.
• resolve_for_diff p95 under target.
• Check-run completion latency validated from queue completion to GitHub callback.

Security Gates

• GitHub webhook signatures verified (timing-safe comparison).
• Service tokens scoped and org-bound.
• Audit logs emitted for:
  • decision create/update/approve/supersede
  • policy updates/promotions
  • PR overrides
  • MCP calls

Operational Gates

• 90-day raw audit/event retention verified.
• Daily rollup + digest cron runs observed in production.
• Pager/alerts configured for:
  • webhook failures
  • queue backlog/DLQ spikes
  • D1 query failures
  • check-run post failures
  • MCP auth failures

Release Gates

• CI passes (typecheck, test, build, audit).
• E2E PR flow smoke passes against deployed workers.
• Pilot onboarding runbook validated with at least one new repo.