Skip to content

Production Readiness Checklist

Know what's ready and what still needs work. Production Readiness Checklist is an open-source project scanner and review system for evaluating software from initial governance and requirements through design, implementation, operations, and final production approval. It provides 10,042 technology-neutral controls, stable evidence IDs, reusable decision records, and guidance for automated, human, or AI-assisted reviews.

The control set has two connected layers: 8,621 lifecycle and quality controls across 16 engineering phases, followed by 1,421 production-readiness controls for the release decision. The scanner shows a score for its narrow local checks, but that score is not a claim that every broad control passed. Every applicable requirement needs current evidence, and one material failure can block approval.

Start here

Your goal Start with What you will produce
Scan a repository without changing it Scanner quick start A terminal summary and private HTML report containing all 10,042 controls
Evaluate a product from start to finish Complete engineering review A disposition for every applicable lifecycle and release control
Check an upcoming release quickly 15-minute quick start A scoped assessment and an initial no-go decision
Ask Claude or another agent to inspect a repository AI-assisted review Evidence-backed findings with explicit unknowns
Understand where the added material came from Source consolidation manifest A document-by-document import and deduplication record

Complete review sequence

  1. Define the product, lifecycle, organization, release, and evidence boundaries.
  2. Work through engineering phases 1–16, recording Pass, Fail, Blocked, or Not Applicable for every control.
  3. Apply all specialized modules whose trigger exists, including accessibility, privacy, AI, safety, marketplaces, and regulated domains.
  4. Run the production no-go screen and the ten release tracks.
  5. Collect current evidence, resolve or accept risk through the proper authority, obtain sign-offs, and verify the deployed system.

The order gives reviewers a dependable path through the material; it does not require waterfall development. Teams can assess phases iteratively and revisit controls whenever a design, dependency, environment, or release changes.

Help expand the project

This is an open-source, community-improvable control set. If you find a missing, duplicated, unclear, outdated, or incorrectly categorized control, you can propose a checklist improvement. Contributions to evidence guidance, documentation, navigation, validation, and tooling are also welcome; see the contribution guide.

The scanner

Production Readiness Checklist can inspect a repository and its available engineering evidence against the complete control set. It maps every result to a stable control ID, cites the evidence behind each conclusion, distinguishes verified facts from unknowns, and generates a prioritized report of failures, blocked checks, manual verification work, and next actions.

npm install -g @marinjursic/prc
cd /path/to/project
prc

The global tool lives outside the project. A normal scan does not install project dependencies, run project code, fix files, or write the report into the project.

The automated coverage is still growing. Production Readiness Checklist remains technology-neutral, treats unavailable production and organizational evidence as unknown rather than passed, and leaves risk acceptance and release approval to accountable humans.

Coverage map

Review layer Categories Purpose
Foundations Governance, product, requirements, UX, architecture Establish intent, scope, ownership, risk, and system design
Construction Code, services, APIs, data, security, privacy, testing Verify the product and its implementation properties
Delivery and operation Developer experience, platform, delivery, SRE, support, documentation Verify that teams can build, deploy, observe, recover, and maintain it
Specialized assurance Trust and safety, ecosystems, AI/ML, specialized domains Apply triggered controls without breaking the main review sequence
Production decision Ten production-readiness tracks Approve the exact artifact, configuration, environment, and release

Evidence states

State Meaning
Pass Current evidence demonstrates that the control is satisfied.
Fail Evidence demonstrates that the control is not satisfied.
Blocked Required access, evidence, or work is missing.
Not Applicable The trigger is absent and a reviewed reason is recorded.

Every applicable requirement has current evidence; no known risk exceeds the organization's tolerance; critical user journeys meet defined reliability and security objectives; and the organization can detect, contain, roll back, restore, support, and communicate failures.