keys and doors

Environment signoff

Final verification of Vercel, Stripe, Supabase, Resend, OpenAI, site URL, and webhook secrets.

Prevents production from using localhost, test keys, or wrong Supabase project.

owner action

Verify env after deploy, not only before it.

proof

  • Production env screenshot/checklist without the keys themselves.
  • NEXT_PUBLIC_SITE_URL points to domain.
  • Service keys do not reach client.

stop if

  • A secret key appears in logs.
  • Webhook secret missing.

related