Production Checklist

• Use dedicated least-privilege API tokens
• Separate development/preview/production targets
• Restrict production writes
• Export env before deploy
• Monitor pull/export failures
• Use snapshot mode for rollback-heavy workflows