# Production Readiness

## Current Status

Meridian CRM is not production-ready yet.

## Passed

- Automated tests pass.
- Fresh testing migration and seed pass.
- Asset build passes.
- Baseline security headers are implemented and covered by tests.
- Queue failed list is clean.
- No scheduled tasks are currently defined.
- Core CRUD modules are functional.

## Blockers To Production

- Browser E2E suite missing.
- Dedicated Policies missing.
- No production `.env` hardening verification.
- HSTS/HTTPS deployment hardening is not verified.
- Public storage link is not configured.
- Composer command is unavailable in the tested shell.
- No backup/restore procedure.
- No queue worker/scheduler deployment docs.
- No performance benchmark with realistic data.

## Production Checklist

- Set `APP_ENV=production`.
- Set `APP_DEBUG=false`.
- Use strong `APP_KEY`.
- Configure HTTPS and secure cookies.
- Configure production DB, cache, queue, mail, and session drivers.
- Run migrations against staging first.
- Run browser E2E and accessibility checks.
- Configure log rotation and monitoring.
- Configure backups.
- Add HSTS after HTTPS is enforced.

## Verdict

NOT READY.