Before promoting an integration to production, a final verification must confirm that all technical, operational, and functional requirements have been satisfied.

This checklist represents the final control point to ensure that the integration is not only correct in isolation but also ready to operate reliably under real production conditions, including asynchronous processing, failure scenarios, and operational monitoring.

Configuration and Environment Readiness

• All endpoints are configured for the correct production environment
• No Sandbox credentials or configurations are present in production
• AuthToken, X-IBM-Client-Id, and terminalId are valid and correctly provisioned
• Webhook endpoints are reachable and correctly configured
• Network communication is secured (HTTPS) and stable

See F.6.1 Environment and Configuration Readiness.

End-to-End Flow Validation

• All supported payment methods and flows have been validated end-to-end
• All transaction lifecycle stages are correctly handled (initial, intermediate, final)
• Asynchronous behavior is correctly implemented and validated
• Webhook notifications are received and processed correctly
• Final transaction state is confirmed via the Status API

See F.6.5 End-to-End Flow Validation Before Go-Live.

Transaction Outcome Handling

• All outcome scenarios are correctly handled:
  • Success
  • Declined
  • Pending / InProcessing
  • Timeout / unknown outcomes
• paymentStatus and returnStatus are correctly interpreted
• Business logic is aligned with final transaction state

See F.3 Success and Error Scenarios.

Idempotency and Duplicate Protection

• Duplicate requests do not create duplicate transactions
• Duplicate webhook notifications are safely handled
• Retry mechanisms are controlled and state-aware
• Transaction identifiers (merchantTransactionId, transactionID) are consistently used

See F.6.2 Transaction Idempotency and Duplicate Protection.

Asynchronous Flow Readiness

• Pending states are fully supported and correctly handled
• Business actions are deferred until final state confirmation
• System tolerates delayed, duplicated, and out-of-order events
• Event-driven processing is aligned with authoritative state

See F.6.3 Asynchronous Flow Readiness.

Webhook Reliability and Processing

• Webhooks are processed idempotently
• Event handling is order-independent
• Fast acknowledgment of webhook reception is implemented
• Fallback mechanisms (Status API) are in place

See F.6.4 Webhook Reliability and Processing Guarantees.

Operational Resilience and Failure Handling

• Failure scenarios are correctly classified and handled
• Unknown states are resolved via the Status API
• Retry strategies are controlled and safe
• All transactions are eventually resolved to a final state

See F.6.6 Operational Resilience and Failure Strategy.

Observability and Monitoring

• All transactions are traceable end-to-end
• Correlation identifiers (transactionID, merchantTransactionId, notificationID) are logged
• Monitoring and alerting are in place for key operational signals
• Failures, anomalies, and inconsistencies can be detected and diagnosed

See F.6.7 Production Observability Prerequisites.

Data Integrity and Consistency

• Transaction data is validated at all stages
• Data remains consistent across all systems
• Authoritative state is always respected
• Reconciliation processes are implemented and verified

See F.6.8 Data Integrity and Consistency Controls.

Operational Readiness

• System behaves correctly under realistic production conditions:
  • Network latency
  • Concurrent transactions
  • Transient failures
• No dependency on synchronous assumptions
• System can sustain full transaction lifecycle reliably

Final Go-Live Criteria

An integration is ready for production only when:

• All checklist items have been validated
• No critical gaps remain in configuration, behavior, or observability
• All flows behave correctly under asynchronous and non-deterministic conditions
• Transaction integrity and consistency are guaranteed

Failure to satisfy these criteria introduces operational risk and potential financial impact.

Final Consideration

The go-live checklist is the final gate before production deployment.

A production-ready integration ensures that:

• All technical and operational requirements are fulfilled
• System behavior is predictable and reliable under real-world conditions
• All risks related to asynchronous processing, failure, and data consistency are controlled

Proceeding to production without completing this validation exposes the system to avoidable failures, inconsistencies, and financial risk.