# CodeQuest Kids Final Launch Checklist

## Infrastructure
- [ ] Cloudflare account and production project
- [ ] D1 database created and migration applied
- [ ] OPENAI_API_KEY stored as a Worker secret
- [ ] Production APP_ORIGIN / ALLOWED_ORIGIN configured
- [ ] Custom domain connected with HTTPS
- [ ] Backups and monitoring configured

## Product
- [ ] Parent/guardian authentication live
- [ ] Child profiles and permissions live
- [ ] Verifiable parental consent implemented
- [ ] AI Coach live with rate limits and safety monitoring
- [ ] Isolated server-side code execution live
- [ ] Progress sync and account recovery tested
- [ ] Certificates and portfolio tested

## Pricing
- [x] All learner and family features are £0
- [x] No joining fee
- [x] No subscription
- [x] No checkout required
- [x] No hidden user charges

## Safety / legal
- [ ] Privacy notice legally reviewed and published
- [ ] Terms legally reviewed and published
- [ ] Data retention/deletion process tested
- [ ] Child-safety escalation/reporting process published
- [ ] Accessibility audit completed
- [ ] Security/abuse/rate-limit tests completed

## Launch
- [ ] Staging smoke test passed
- [ ] Production smoke test passed
- [ ] Parent supervised child-user test passed
- [ ] Monitoring alerts tested
- [ ] Rollback procedure tested

- [ ] Set `ALLOWED_ORIGIN` to the exact production origin.
- [ ] Verify parent/guardian consent and privacy notice before collecting production signups.
- [ ] Verify `/api/health` reports database and AI status; billing should remain `false`.