Skip to main content

Care Plan Service — Service Readiness

Status: populated Owner: TBD Last updated: 2026-04-18 Companion: Service Template · 03 platform-services · 02 DDD

Readiness Gate Checklist

All items must be ✅ before production deployment.

Documentation

  • All 17 service docs complete and reviewed (not stubs)
  • EPICS.md and USER_STORIES.md reviewed by product owner
  • API_CONTRACTS.md matches OpenAPI spec in codebase
  • EVENT_SCHEMAS.md matches published schema registry entries

Code Quality

  • ESLint: zero errors; domain layer import-restriction passes
  • TypeScript strict mode: zero type errors
  • No hardcoded secrets (secrets scanning passes)
  • No console.log statements in production code

Testing

  • Unit test coverage ≥ 90% (domain + use cases)
  • Integration coverage ≥ 80%
  • tenant-isolation.integration.spec.ts green
  • outbox.integration.spec.ts green
  • inbox.integration.spec.ts green
  • Contract tests (Pact) green against Pact broker
  • FHIR golden fixtures pass R4 StructureDefinition validation in CI
  • E2E critical path tests green in staging

Security

  • RBAC matrix reviewed and tested for each role
  • Sensitive program category access control tested (HIV, mental health)
  • RLS policies validated against adversarial cross-tenant queries
  • Module entitlement gate tested for licensed and unlicensed tenants
  • Security reviewer sign-off (auth, PHI handling, audit coverage)

Observability

  • OpenTelemetry traces visible in Grafana staging
  • All dashboards (overview, outbox, domain) populated in staging
  • All alerts configured and tested (non-firing in healthy state)
  • Runbooks linked from all alerts

Operations

  • Canary deploy completed (5% traffic, 30 min hold) in staging
  • Rollback verified in staging
  • On-call rotation assigned
  • Disaster recovery: DB restore tested

Sign-off

  • Tech lead sign-off
  • SRE sign-off
  • Product owner sign-off on EPICS/USER_STORIES