Skip to main content

Config Service — Service Readiness

Status: populated Owner: TBD Last updated: 2026-04-18 Companion: Service Template · DEFINITION_OF_DONE.md

1. Readiness Gate Checklist

A service is ready for production only when all items below are green.

Documentation

All 17 docs complete (not stubs)
SERVICE_OVERVIEW.md reviewed by tech lead
API_CONTRACTS.md reviewed and OpenAPI generated
SECURITY_MODEL.md reviewed by security team
MIGRATION_PLAN.md approved by platform team

Code Quality

TypeScript strict mode, zero errors
ESLint: domain layer import restrictions pass
No synchronize: true in ORM config
All env vars validated via Zod at startup
No hardcoded secrets or credentials

Tests

Unit test coverage ≥ 80 % (statement + branch)
test/integration/tenant-isolation.spec.ts — all scenarios pass
test/integration/outbox.spec.ts — all scenarios pass
test/integration/inbox.spec.ts — all scenarios pass
Pact consumer contracts green against Pact broker
Event schema conformance tests green for all 13 event types
Performance test: resolution p95 < 100 ms at 50 rps

Security

Cross-tenant resolution test confirms zero data leakage
RLS policies verified in integration tests
Penetration test for ABAC bypass scenarios completed
Secret rotation procedure documented

Observability

OpenTelemetry traces visible in Grafana/Tempo for staging
All SLO alerts configured with runbooks linked
Dashboard: Config Service Overview live in Grafana
Dashboard: Resolution Pipeline Breakdown live in Grafana

Deployment

Docker image built and pushed to registry
Helm chart / K8s manifests reviewed
Health check endpoints (/health/live, /health/ready) verified
Canary deploy completed (5 % / 30 min) in staging
Rollback procedure verified in staging
On-call rotation assigned

Migrations

Database migrations applied to staging without errors
Seed data (GLOBAL node, system roles) verified in staging
Rollback migration tested

Sign-off

Role	Name	Date
Tech Lead	TBD	—
SRE	TBD	—
Security	TBD	—

1. Readiness Gate Checklist