Twilio · Required for go-live
Twilio A2P 10DLC registration approved
Production outbound SMS is blocked until carrier approval is received.
Operations
Go-live checklist for Twilio, Google, Anthropic, security, and deployment.
Total
11
Completed / Waived
8
Open Blockers
3
Categories
7
Twilio · Google · Privacy · Security · Anthropic · Deployment · Operations
Not Started
1
In Progress
1
Blocked
1
Completed
8
Waived
0
Not Required
0
Twilio · Required for go-live
Twilio A2P 10DLC registration approved
Production outbound SMS is blocked until carrier approval is received.
Twilio · Required for go-live
TWILIO_SMS_ENABLED remains false until A2P approval
Environment flag confirmed false. Code path checks this before any Twilio create-message call.
Twilio · Required for go-live
Twilio inbound + status webhooks configured
After deployment, set webhook URLs for SMS inbound, SMS status, voice inbound, voice status.
Twilio · Required for go-live
Voice forwarding finalized to EA Pinder office number
Currently forwards to a temporary test number. Must be replaced with EA Pinder office/business number before go-live.
Google · Required for go-live
Google OAuth redirect URIs verified in Cloud Console
localhost + https://platform.eapinder.com callback registered.
Privacy · Required for go-live
Privacy & Terms public on eapinder.com
https://www.eapinder.com/privacy and /terms reachable.
Security · Required for go-live
Google OAuth tokens encrypted before storage
AES-256-GCM via lib/crypto/token-crypto.ts. Access + refresh tokens encrypted before insert into g6e_oauth_connections; decrypted on demand by loadDecryptedTokens(). Key sourced from CONTACT_FIELD_ENCRYPTION_KEY env var.
Anthropic · Required for go-live
Anthropic API key present in environment
ANTHROPIC_API_KEY set in the eapinder-ops Vercel project for Production + Preview. AI agents themselves remain gated by ANTHROPIC_AI_ENABLED and human-confirmation guardrails (tracked separately).
Security · Required for go-live
No secrets committed to repository
.env.local gitignored. All secret references stored as env var names only.
Deployment · Required for go-live
Production environment variables configured in Vercel
Supabase, Twilio, Google, Anthropic, CRM flags, and CONTACT_FIELD_ENCRYPTION_KEY set in the eapinder-ops Vercel project for Production + Preview.
Operations · Required for go-live
Outbound AI requires human confirmation
Communications service layer enforces approval gate. AI must not bypass approval.