palantir-prod-checklist

name	palantir-prod-checklist
description	Execute Palantir Foundry production deployment checklist and rollback procedures. Use when deploying Foundry integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "palantir production", "deploy foundry", "palantir go-live", "foundry launch checklist".
allowed-tools	Read, Bash(kubectl:*), Bash(curl:*), Grep
version	1.5.0
license	MIT
author	Jeremy Longshore <[e-mail]>
tags	["saas","palantir","foundry","production","deployment"]
compatibility	Designed for Claude Code, also compatible with Codex and OpenClaw

Palantir Production Checklist

Overview

Complete go-live checklist for deploying Foundry-integrated applications to production. Covers credential management, health checks, monitoring, and rollback procedures.

Prerequisites

• Staging environment tested and verified
• Production OAuth2 credentials from Developer Console
• Deployment pipeline configured
• Monitoring infrastructure ready

Instructions

Pre-Deployment: Credentials & Config

• OAuth2 client credentials in secrets manager (not personal tokens)
• Scopes are minimal: only what the app actually needs
• FOUNDRY_HOSTNAME points to production enrollment
• Separate credentials from staging (not shared)
• Credential rotation schedule documented (90-day max)

Code Quality

• All tests passing including Foundry integration tests
• No hardcoded hostnames, tokens, or RIDs
• Error handling covers all Foundry ApiError status codes
• Rate limiting with exponential backoff implemented
• Logging uses structured format (JSON) with request IDs

Infrastructure

• Health check endpoint verifies Foundry connectivity

@app.get("/health")
async def health():
    try:
        client.ontologies.Ontology.list()
        return {"status": "healthy", "foundry": "connected"}
     foundry.ApiError  e:
         {: , : }