Production Readiness Gates (Phase 2)

Date: 2026-04-15

Mandatory Release Gates

• AUTH_MODE=jwt in production (dev tokens disabled) — configurado via Cloudflare dashboard env var
• Database migrations executed successfully before backend rollout — baseline 0001_init.sql aplicada (squash v1.0.0; antes: 13→32 migrações incrementais)
• Security headers enabled (CSP + HSTS in production) — middleware security-headers.ts ativo
• Session expiry behavior validated (expired session blocks protected submissions) — implementado em auth.ts com TTL de 15min
• Sync retry/backoff scenarios validated under repeated timeout failures — #228 (hardening High)
• Conflict metadata surfaced in UI for operator action — #228 (hardening High)
• LGPD data handling workflow documented for school operators — docs/operations/lgpd.md

Data Retention and Audit Policy (Baseline)

• Synced queue/event operational records may be purged after 30 days.
• Audit-critical event history and deletion justifications must be retained.
• Purge jobs must produce an auditable execution record (timestamp, actor/process, deleted counts).

LGPD Operational Workflow (Baseline)

• Classify student data fields before pilot deployment, including displayName and photoRef.
• Record purpose and retention policy per field group.
• Document request flow for data access, correction, and constrained deletion with historical preservation.
• Validate third-party storage providers for applicable legal obligations before live pilot.