PR Deployment Guard Readiness Checklist
- Keep
pr-deployment-guardtrigger disabled until bridge auth and replay protection are validated. - Verify webhook payload includes repository, PR number, branch, commit SHA, and deployment id.
- Confirm staging and production scopes are both readable by the deployment guard agent.
- Require Review mode and human approval for any write-action recommendation.
- Dry-run against one low-risk PR and one risky PR before wider rollout.