Launch governance

Ship voice agents with enterprise controls.

Use this checklist before moving a tenant, phone number, or agent version to production traffic.

Launch checklist

Security

Access and data boundaries

Separate admin keys from tenant bearer tokens, verify Twilio signatures, and review PII handling.

Runtime

Agent behavior

Approve system prompts, model, voice, allowed tools, phone routes, and fallback behavior.

Operations

Monitoring and response

Track readiness, live sessions, call completion, transfer rate, error rate, and provider failures.

Business approval

Launch ownership

Identify the business owner, escalation owner, engineering owner, rollout limits, and stop conditions.

Production gates

GateRequired evidenceOwner
Security reviewCredential scopes, Twilio signature verification, PII handling, and stream-token rotation are reviewed.Security and engineering
Agent behaviorApproved system prompt, model, voice, allowed tools, escalation language, and refusal policy are recorded.Business and CX
Operational readinessDashboards, alerts, callback queues, runbooks, and support ownership are live.Operations
Rollout approvalTraffic limits, rollback plan, success metrics, and stop conditions are agreed before launch.Launch owner

Minimum telemetry

GET/health/ready

Kubernetes and external readiness gate for production traffic.

GET/api/v1/call-logs

Call status, direction, duration, escalation state, and outcome tracking.

GET/api/v1/voice-sessions

Transcripts, function calls, summaries, and conversation state.

GET/api/v1/admin/rollout-governance

Agent quality, evaluation thresholds, and rollout policy checks.

Final release gate

Production traffic should not start until security, runtime, operations, and business approval are complete for the tenant and agent version being launched.