Skip to main content

Developer Portal Service — Service Readiness

Version: 1.0 Status: Draft Owner: Product + Developer Relations (DevRel) Last Updated: 2026-04-20

1. Intent​

Production readiness gate. Every box must be green before the Developer Portal handles production tenant traffic, the Verify API is exposed publicly, or any SDK is published to a public registry.

2. Functional​

  • All EP-DEV-01..05 stories implemented and accepted
  • Verify API contract tests passing for all four channels
  • All six server SDKs publishable from a single tag with manual approval
  • Mobile SDKs released to internal test channels (TestFlight / Play internal track)
  • Snippet generator produces valid output for every endpoint × every language
  • OpenAPI spec passes spectral lint in CI

3. Operational​

  • Runbooks committed for: key revocation lag, Verify error spike, sandbox 5xx, SDK pipeline failure
  • Dashboards live in Grafana (portal overview, Verify funnel, sandbox health)
  • PagerDuty rotation defined for DevRel + on-call SRE
  • Synthetic probers running

4. Security​

  • Pen-test of portal authentication & Verify endpoints completed; high findings closed
  • HMAC pepper provisioned in production KMS; rotation procedure documented
  • API key one-time-view confirmed end-to-end (no secret in DB, no secret in logs)
  • Rate limits + spend cap enforced and load-tested

5. Compliance​

  • Verify templates approved in compliance-engine (one per locale × channel)
  • Privacy notice updated to cover developer telemetry
  • Data residency confirmed (in-country Postgres + S3-compatible store)

6. Performance​

  • Docs LCP p95 ≤ 1.5 s on representative connection
  • Verify start p95 ≤ 200 ms (excluding outbound dispatch)
  • Key revocation propagation p95 ≤ 60 s

7. Documentation​

  • All 17 docs committed and reviewed
  • DevRel-authored launch announcement published
  • Migration plan executed for pilot developers (see MIGRATION_PLAN.md)