Production readiness checklist.

Complete this checklist for every agent service before customer traffic reaches it.

Application

• Pin the Quasentra and framework package versions.
• Create separate development, staging and production API keys.
• Restrict each key to exact agent IDs and minimum scopes.
• Close the SDK client during graceful shutdown.
• Set bounded timeouts and retries; do not bypass failures.
• Back up .production-secrets/gateway_master_key in a restricted offline secret store; losing it makes managed credentials unrecoverable.

Tool boundary

• Every sensitive tool passes through a supported adapter.
• No duplicate unwrapped callable reaches the model.
• New tools remain default-denied until reviewed.
• High-impact credentials are moved to the gateway or a vault.
• Tool inputs are typed and validated by business code.

Operational verification

# Deployment smoke checks
curl --fail https://quasentra.com/health
python -c "import quasentra; print(quasentra.__version__)"

# Then run one ALLOW, one DENY and one APPROVAL test
# with a non-production test record.

Monitoring

Alert on authorization-service errors, unusual deny spikes, approval backlogs, agent quarantine and quota exhaustion. Keep audit evidence according to your business retention policy.

Incident response

If a key or tool credential is exposed: block the agent, revoke the key, rotate the underlying credential, inspect decisions/incidents, and only restore service after a clean staging test.