Skip to main content

Customer Portal — Service Readiness

Status: populated Owner: Product Engineering (Frontend) Last updated: 2026-04-18

1. Readiness Checklist​

Code Quality​

  • TypeScript strict mode enabled; zero any types in production code
  • ESLint + Prettier passing with zero warnings
  • All components < 300 lines; pages < 500 lines
  • No console.log in production code

Testing​

  • Unit test coverage ≥ 80%
  • All E2E critical flows passing in CI
  • Accessibility: zero axe-core violations (WCAG 2.1 AA)
  • Visual regression baseline established

Security​

  • Security headers configured (CSP, HSTS, X-Frame-Options)
  • No secrets in source code or Docker image
  • pnpm audit passes with no HIGH/CRITICAL vulnerabilities
  • Raw API keys / signing secrets never logged or stored client-side
  • CSRF protection verified on all state-changing endpoints

Operations​

  • Health check endpoint GET /api/health returns 200
  • Liveness and readiness probes configured in K8s deployment
  • Sentry DSN configured for error tracking
  • Structured JSON logging emitting correct fields
  • Prometheus metrics endpoint exposed
  • Alerting rules configured in Alertmanager

Performance​

  • LCP < 2.5s on 4G (Lighthouse)
  • JS bundle size: landing < 150kb gzipped
  • Static assets served with immutable cache headers via CDN
  • No render-blocking resources

Documentation​

  • All 17 service docs populated
  • Local dev setup guide verified by a second engineer
  • API contracts match actual Kong route configuration

2. Service Level Objectives​

SLOTarget
Availability99.9% monthly uptime
Error rate< 1% of requests result in 5xx
TTFB (server-rendered page)< 500ms p95
LCP< 2.5s p75