Open Source Launch Checklist
Use this page when you want to confirm that the frontend and backend are ready to be presented together as a public open-source stack.
This checklist complements the frontend-only release checklist in docs/release-final-checklist.md.
1. Public Surface
Confirm the public-facing experience is coherent.
- frontend repository README matches current preview and docs behavior
- frontend docs site is publicly reachable
- frontend preview URL is publicly reachable
- backend repository README matches current runtime and release behavior
- backend docs site is publicly reachable
2. Required GitHub Settings
Frontend
mainbranch protection is enabled- required checks include
Frontend Quality Gate / quality - required checks include
Frontend Contract Gate / contract-check - required checks include
Full-Stack Pairing / pairing-smoke - Pages source is
GitHub Actions CODEOWNERSis active
Backend
mainbranch protection is enabled- required checks include backend quality, test matrix, runtime smokes, and supply-chain workflows
- Pages source is
GitHub Actions - GHCR publish permissions are working
CODEOWNERSis active
3. Frontend Release Artifacts
Confirm the release is actually consumable.
docs/releases/vX.Y.Z.mdexists- GitHub Release note matches the tag
- production app bundle is attached
- demo preview bundle is attached
- Pages bundle is attached
frontend-sbom-cyclonedxexists- frontend SBOM attestation exists
- frontend dist attestation exists
4. Full-Stack Pairing Truth
Confirm the frontend still pairs with the current backend.
- compatibility matrix is updated in both repositories
pnpm typecheck:apipassespnpm test:fullstackpasses- frontend preview smoke still passes
- backend OpenAPI examples still reflect real contract shapes for the high-value admin flows that drive generated SDK usage
5. Demo and Preview Truth
Confirm the public preview does not overclaim.
- preview clearly indicates that it uses the built-in demo runtime
- docs explain which paths are preview-only and which require a real backend
- placeholder or backend-specific flows are documented truthfully
- README does not imply that the static preview is a full public staging environment
6. Support Surface
Before promoting the project publicly, confirm the support layer is current.
CONTRIBUTING.mdis currentSECURITY.mdis currentSUPPORT.mdis current- issue templates still match current maintainer expectations
- release docs still point to the right artifact names and workflow names
7. Launch Order
Use this order when promoting a new paired version.
- push backend
main - wait for backend CI, supply-chain, docs, and runtime smokes
- push frontend
main - wait for frontend quality, contract, preview, and full-stack pairing workflows
- publish backend release
- publish frontend release
- confirm docs, preview, and release artifacts are all accessible before external announcement
8. Hard Stop Conditions
Do not promote the stack publicly if any of these are true.
- backend docs site is unavailable
- frontend docs site or preview is unavailable
pnpm test:fullstackis red- generated API files are out of sync
- release artifacts are missing from GitHub Release
- docs claim a public full-stack demo exists when only the static preview is available