Remaining Tasks to Finalize Production

This is the single consolidated checklist for “what’s left” before we call the stack production-final.

A) Must-fix production hardening (Tier A)

From docs/PRODUCTION_READY_CHECKLIST.md:

• [ ] Implement EIP-1559 gas safety + atomic reservations (services/withdrawal/.../gas_safety.go)
• [ ] Implement risk/AML engine (services/withdrawal/.../risk_engine.go)
• [ ] Implement idempotency keys (gateway + withdrawal) + DB table
• [ ] Add commit SHA tracking into built images and persist in key records

B) Core product completeness (backend APIs/services)

From docs/CURRENT_STATUS_SUMMARY.md:

• [ ] Market: CoinGecko + Nobitex clients; price aggregation; background updater
• [ ] Transactions: buy/sell/swap endpoints + fee calculator
• [ ] Auth: refresh/logout/me endpoints
• [ ] Deposits: address/status/list endpoints
• [ ] Withdrawals: submit/limits/list/status endpoints
• [ ] Payment service: Paystar + banking integrations (create service if missing)
• [ ] Voucher service: PS/HOT/UTOPIA integrations (create service if missing)
• [ ] Support service (create)
• [ ] KYC service (create)
• [ ] WebSocket server (create) for realtime updates (if required by TMA)
• [ ] Admin backend migration plan execution (Phase 4)

C) Blockchain remaining work

From BLOCKCHAIN_PRODUCTION_STATUS.md:

• [ ] BTC UTXO transaction builder (sweep/withdrawal execution support)
• [ ] Run real mainnet testing checklist (deposit/sweep/withdrawal) per chain

D) Testing gates (before “production-final”)

• [ ] Smoke tests for core user flows (auth → wallet → deposit addr → balance → tx history)
• [ ] Fiat-only gates (Level 1 verification requirements) validated end-to-end
• [ ] Runbook-backed rollback drill (gateway + wallet + withdrawal)
• [ ] Alerting coverage for critical components (RPC failures, cursor lag, withdrawal failures)

Owners / tracking

If you want, I can turn this into a more formal tracker by adding:

• “Owner” field per item
• “Priority” (P0/P1/P2)
• “Definition of Done” per item
• Links to code paths and the exact docs that describe requirements