Use this checklist when operating external platforms. It records the action order and review gates, not account values. Do not record platform secrets, account identifiers, verification values, checkout URLs, form endpoints, KYC, bank, tax, payout, user lists, or support messages.
Before opening Cloudflare, run npm run verify and npm run report:launch-suite.
Use Vite, npm run build, dist, and main. Do not add custom domain, environment variables, tracking tag, live checkout, or live form.
Done when the default preview exists and core pages load.
Start only after Cloudflare preview QA passes and sitemap, robots, favicon, and error pages are reviewed.
Do not add Google tag, Ads tag, conversion event, or remarketing during ownership setup.
Done when weacure.com loads over HTTPS, sitemap is reachable, and ownership is confirmed.
Review Contact, Refund, and Data Request Boundary before creating the mailbox.
Configure SPF, DKIM, DMARC, forwarding, and reply identity. Do not enable live form, automation, SMS, or customer import yet.
Done when the mailbox can receive and reply, with unsubscribe, delete, and export routes ready.
Start after support email is ready and Source Notes Pack catalog, Delivery Preview, and Refund are reviewed.
Apply with Source Notes Pack first product. Do not enable embedded payment script, webhook, member login, or later products.
Done when provider review submitted or approved, with checkout URL kept outside GitHub.
Start after support routes are ready and Email Consent Boundary plus Email Reactivation Runbook are reviewed.
Allow only email, explicit consent, preferred language, market, and product interest.
Done when explicit consent is captured and unsubscribe, delete, and export routes are documented.
Do not add birth data field, chart output, SMS default, hidden tracking field, form endpoint, or provider key to the repository.
Start after Cloudflare preview passes, support email is ready, Measurement Plan is reviewed, and Landing Page Readiness is reviewed.
Use safe landing pages, budget cap, negative keywords, and manual search-term review.
Done when campaign scope is cultural study, no prediction or advice claims appear, and pause conditions are written.
Do not enable audience lists, customer match, remarketing, sensitive targeting, or deferred-market targeting.
npm run verify and npm run report:launch-suite.Review Launch Blocker Matrix, Hosting Readiness, Platform Account Readiness, Support Readiness, Provider Readiness, Email Consent Boundary, Conversion Measurement Plan, Landing Page Readiness, and Operations Readiness.