Control before ads
Do not buy traffic until Stripe, webhook, AI, email, recovery, and mobile flow pass a manual test.
launch chamber
Launch OmenHall without divining errors
This section gathers checklists for redeploy, real payments, mobile QA, ADA audit, legal review, monitoring, and go-live day.
Vercel
Supabase
Stripe
Mobile
Secrets do not live in code
API keys, webhook secrets, service role keys, and admin tokens should live only in Vercel Environment Variables and be rotated after exposure.
One paid path beats a hundred pages
Before launch, one complete test reading from question to email matters more than ten more pretty doors.
The user should not see the kitchen
Hash, record id, job id, webhook, Supabase, and cost metrics should help support, not scare the client on result pages.
final gate
The last QA before real users
These rooms check not site beauty, but readiness to open payments, email, data, privacy, and support without manual firefighting.
Final launch QAThe final check before opening the gates: data, money, email, SEO, legal, and support.Environment lockWhich variables must be set, which are forbidden, and what to rotate before live.Live payment drillThe minimal live/test Stripe drill: checkout, webhook, receipt, refund, and recovery.Delivery drillResend, result email, recovery email, sender reputation, and fallback support path.Data and privacy drillSupabase, RLS, storage, deletion, support access, and no-secret output.Indexing auditWhat should be indexed, what must be noindex, and where account pages must not leak.Do not launch ifA hard stop-signal list before ads and real users.
production dry run
The rehearsal before live
One test order, one email, one support ticket, one refund/recreate scenario, one mobile smoke, and one rollback drill before real users see the site.
Production dry runOne rehearsal: test order, email, support, refund/recreate, mobile smoke, and rollback.Test order drillA controlled order from question to paid record and access.Test email drillReceipt, recovery, and support email without secret leakage.Support ticket drillOne ticket: lost link, order lookup, reply, and closure.Refund / recreate drillDecision: recreate the scroll, refund, or escalate to manual review.Mobile smoke drilliPhone/Android path: question, checkout, email, account, recovery.Rollback drillWhat to do if deploy breaks payment, email, AI, or account.Dry-run signoffFinal signoff: who saw what passed and what blocks launch.
operations doors
What to check before launch
Final launch QAThe final check before opening the gates: data, money, email, SEO, legal, and support.Environment lockWhich variables must be set, which are forbidden, and what to rotate before live.Live payment drillThe minimal live/test Stripe drill: checkout, webhook, receipt, refund, and recovery.Delivery drillResend, result email, recovery email, sender reputation, and fallback support path.Data and privacy drillSupabase, RLS, storage, deletion, support access, and no-secret output.Indexing auditWhat should be indexed, what must be noindex, and where account pages must not leak.Do not launch ifA hard stop-signal list before ads and real users.Production dry runOne rehearsal: test order, email, support, refund/recreate, mobile smoke, and rollback.Test order drillA controlled order from question to paid record and access.Test email drillReceipt, recovery, and support email without secret leakage.Support ticket drillOne ticket: lost link, order lookup, reply, and closure.Refund / recreate drillDecision: recreate the scroll, refund, or escalate to manual review.Mobile smoke drilliPhone/Android path: question, checkout, email, account, recovery.Rollback drillWhat to do if deploy breaks payment, email, AI, or account.Dry-run signoffFinal signoff: who saw what passed and what blocks launch.Production checklistThe master list before real users enter.VercelEnvironment variables, redeploy, build logs, and domain.SupabaseMigrations, Auth, RLS, storage, and rate limit.Stripe test flowCheckout, webhook, paid status, AI, receipt, and access.Resend emailSender, receipt, recovery, and Oracle Letters.Mobile QAiPhone Safari, Android Chrome, card table, and checkout.ADA auditKeyboard-only, screen reader, contrast, zoom, and reduced motion.Legal reviewTerms, Privacy, Refund, Disclaimer, Florida/US risk.MonitoringStripe, OpenAI, Supabase, email, cost spikes, and alerts.Rollback planWhat to do if something breaks after deploy.Go-live dayThe order of actions on launch day and after first payments.