Go-Live Checklist

Use this checklist after completing the relevant pack or packs.

  • Confirm the correct base pack was selected
  • Confirm all required 3DS scenarios were executed
  • Confirm every Critical scenario has evidence
  • Confirm duplicate-prevention behaviour was tested
  • Confirm negative auth outcomes were tested where relevant
  • Confirm the evidence bundle contains the correct identifiers and timestamps
  • Confirm any remaining Important failures are explicitly documented as risks
  • Confirm manual-only checks were completed for hosted form or challenge behaviour

Capture the path-appropriate minimum evidence:

PathEvidence
Paylinkpaylink_token, trans_no where available, timestamp
Elementspayment_intent_id, trans_no, timestamp
API / server-ledcontext_id, trans_no, identifier, timestamp

For stored credential or MIT paths, add:

  • agreement reference
  • original setup reference
  • card holder account reference where applicable

Use the readiness model consistently:

StatusInterpretation
ReadyCritical scenarios passed and evidence is complete
Ready with risksCritical scenarios passed, but important weaknesses remain
Not readyA critical scenario failed, was omitted, or cannot be evidenced

Do not use percentage scores. Record failed critical scenarios, failed important scenarios, and the specific risk themes instead.