Deployment checklist

This checklist applies when your organization runs a customer-deployed Boson stack (proprietary Boson software in your infrastructure), not an open-source clone. SDKs remain open source and must target your Boson API endpoint.

Use this as a starting point for a production-ready deployment.

Networking

• TLS termination (ingress/load balancer)
• outbound egress rules for model providers (if applicable)
• IP allowlists and private connectivity (enterprise)

Data & storage

• database provisioned with backups enabled
• retention policies defined
• object storage configured for artifacts (if used)

Security

• least-privilege service accounts
• secret management (KMS/Vault)
• key rotation procedure documented

Upgrades

• staging upgrade rehearsals
• migration rollback plan
• monitoring dashboards and alerting