ENV-001 critical environment-tiers
Production environment exists
Production environment deployed, deployment method documented, visible in CI history
Question to ask
"How is production deployed — does the whole team know?"
Verification guide
Severity: Critical
Check automatically:
Find deployment workflows in CI:
grep -r -l "production\|prod" .github/workflows/Check GitHub deployment history:
gh api repos/{owner}/{repo}/deployments --jq '.[] | select(.environment | test("prod"; "i")) | {env: .environment, ref: .ref, created: .created_at}' | head -20Check workflow run history for deploy jobs:
gh run list --limit 20 --json name,conclusion,createdAt,headBranch | jq '.[] | select(.name | test("deploy|prod"; "i"))'Look for platform config files:
ls -la vercel.json fly.toml railway.toml render.yaml netlify.toml 2>/dev/null
From CI/deployment history, extract:
- Which workflow deploys to production
- What branch/trigger (main, tags, manual)
- Recent deployment frequency
- Success/failure rate
Ask user to confirm:
- Production URL
- Is the detected deployment method correct?
Pass criteria:
- Production deployments visible in history
- Clear deployment trigger identified
Fail criteria:
- No deployment history found
- Can't determine how production is deployed
Evidence to capture:
- Production URL
- Workflow file path
- Deployment trigger (branch/tag/manual)
- Last successful deployment date
- Platform (detected from config or workflow)