# GrabJet Operator Integration Production Go-Live Checklist

## Business
- Company profile verified.
- AOC / operating certificate verified.
- Operating region and aircraft scope approved.
- Primary operations contact confirmed.

## Technical
- Sandbox API key issued and tested.
- Webhook secret configured and signature verification passed.
- Aircraft sync happy path passed.
- Availability sync and conflict behavior passed.
- Booking request accept/reject round trip passed.
- Flight status update passed.
- Duplicate idempotency event test passed.
- Bad auth rejection test passed.

## Security
- HTTPS webhook endpoint configured.
- Secrets stored server-side only.
- Logs redact tokens, API keys, and sensitive documents.
- Production credential owner identified.

## Operations
- Manual review/conflict process agreed.
- Support escalation contacts confirmed.
- Production cutover date approved.
- Rollback/contact plan agreed.