HR-P0 Standalone Production Readiness

Production gate before Account/ERP integration

This gate allows a standalone HR production deployment only after auth, database, audit, fixture shutdown, TLS, backup, and rollback controls are ready.

DNS statusStaging firstProduction DNS waits for HR-P0 checks to pass in the target environment.
Standalone ready

Auth

Bootstrap admin, login sessions, company membership, and role grants run before Account adapter migration.

Postgres runtime

Database

PEOPLE_DATA_RUNTIME=postgres, runtime RLS context, required tables, seed/import tracking, and backup/restore.

Blocked in production

Fixture data

PEOPLE_RUNTIME_MODE=production disables fixture endpoints.

Required

Runtime readiness

GET /people/v1/runtime-readiness must pass against the target Postgres database before DNS.

Required

Audit

Login, sensitive reveal, export, approval, payroll, role grant, and destructive actions.

Required

TLS/DNS

Reverse proxy terminates HTTPS and forwards to private local services.

Deferred

ERP integration

HR owns data now; HR-5 maps Account/ERP references later.