Skip to content
cccskills
FreePublished on GitHub

attio-prod-checklist

Review whether an Attio integration is ready for production using code and operational evidence. Check authentication, permissions, retries, webhooks, monitoring, and rollback, then produce a GO or NO-GO decision with blockers and named approvers.

OriginalShow the original description

Run an evidence-based production-readiness review for an Attio integration across identity, scopes, data ownership, retries, webhooks, observability, rollback, and support. Use when preparing to enable production Attio traffic. Trigger with "Attio production checklist", "Attio go-live", or "review Attio release".

Run score Not tested

See how to install

Good for

  • Review an Attio integration before production launch
  • Check webhook signatures and duplicate-event handling
  • Document release blockers, accepted risks, and approvers

Files included (2)

  • SKILL.md3.7 KB
  • references/official-docs.md2.1 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Attio Production Readiness Review

Overview

This skill produces a release decision from repository and operational evidence. A checked box without a receipt is unresolved, not complete.

Prerequisites

  • Exact artifact, environment, workspace, and release owner
  • Endpoint inventory with methods and required scopes
  • Data ownership, retention, and deletion policy
  • Monitoring, incident, rollback, and support paths

Tool Discipline

Use Read, Glob, and Grep to inspect auth, mappings, tests, workflows, observability, and rollback code. Use WebFetch only for current official Attio documentation. Use Write or Edit only to remediate a named gap with verification.

Current Contract

  • Authentication must match the tenancy model and use endpoint-derived least privilege.
  • Record and entry identity, owned fields, and destructive boundaries must be explicit.
  • Retries must honor Retry-After and exclude permanent request failures.
  • Webhook receivers need raw-body HMAC verification and idempotent processing.
  • Pagination mode must be confirmed endpoint by endpoint.

Authentication

Verify secret location, workspace or tenant binding, scopes, rotation owner, revocation procedure, and absence from logs and artifacts. Use Bearer authentication for REST requests.

Instructions

  1. Bind the review to the exact artifact, environment, workspace, and endpoint inventory.
  2. Verify contract tests, schema discovery, field ownership, identity, and pagination termination.
  3. Verify credential storage, endpoint scopes, tenant isolation, rotation, and redaction.
  4. Verify timeouts, bounded retries, read/write traffic controls, and 429 handling.
  5. For webhooks, verify HTTPS, raw-body signature checks, idempotency keys, quick acknowledgement, and replay-safe workers.
  6. Exercise read-only smoke, approved canary, alert path, rollback, and recovery evidence.
  7. Record PASS, FAIL, or explicitly accepted risk for every item and name the approver.

Approval Boundaries

Only the release owner may accept unresolved data-loss, authorization, privacy, or rollback risk. Do not convert missing evidence into PASS.

Output

Return the bound release identity, control matrix with receipts, failed gates, accepted risks, approvers, and final GO or NO-GO decision.

Error Handling

ConditionResponse
Artifact or workspace is unboundReturn NO-GO.
Scope evidence is missingReturn NO-GO until endpoint mapping exists.
Webhook replay is untestedDisable webhook-driven mutation or return NO-GO.
Rollback cannot be exercisedLimit rollout or return NO-GO.

Examples

Input:

release=exact-sha; workspace=production-alias; canary=approved-record

Expected handoff:

decision=NO-GO; blocker=missing webhook replay proof; owner=integration-team

Resources

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Add a synthetic-data CI gate for customer-owned Abridge integration code. Test consent handling, note-review handoffs, redaction, and rollback behavior with mocked vendor boundaries, without connecting CI to a live Abridge or EHR tenant.

  • Adding regression checks to an Abridge integration repository
  • Testing consent and note-release handling
  • Checking logs for sensitive data exposure
jeremylongshore/tons-of-skills-marketplace2.9KUpdated Oct 23, 2026

Triage Abridge recording, note review, Epic handoff, and access problems using observed symptoms and approved guidance. Identify the affected workflow stage, organize a minimal timeline, and prepare a redacted escalation record for the responsible team.

  • Separate recording problems from upload failures
  • Investigate note creation delays and editor issues
  • Identify the responsible team for Epic handoff failures
jeremylongshore/tons-of-skills-marketplace2.9KUpdated Oct 23, 2026

Map and review an Abridge clinical documentation workflow from consent and recording through draft review, evidence checks, edits, and final disposition. Keep clinician approval explicit, identify failure exits, and separate verified facts from tenant-specific details and pending approvals.

  • Map a clinical note workflow for a care setting
  • Check where consent and patient identity are verified
  • Review draft notes against linked evidence before sign-off
jeremylongshore/tons-of-skills-marketplace2.9KUpdated Oct 23, 2026

Audit how clinician-reviewed Abridge note sections map into Epic templates and downstream workflows. Use approved test records to document destinations, exceptions, evidence, rollback steps, and a go or no-go decision for a specific environment.

  • Checking Abridge note section mappings to Epic templates
  • Auditing a department’s approved documentation handoff
  • Preparing test evidence and a go or no-go decision
jeremylongshore/tons-of-skills-marketplace2.9KUpdated Oct 23, 2026

Review Abridge adoption and workflow value using local usage records, clinician feedback, and verified contract costs. Build an evidence based decision table covering adoption, quality, support burden, and options to expand, hold, or improve the rollout.

  • Reviewing adoption after an Abridge rollout
  • Preparing evidence for a renewal decision
  • Comparing workflow outcomes across care settings
jeremylongshore/tons-of-skills-marketplace2.9KUpdated Oct 23, 2026

Prepare a bounded support bundle for an Abridge issue using allowlisted operational details such as versions, coarse timestamps, and correlation references. Exclude recordings, transcripts, patient identifiers, credentials, and unrestricted logs, then document redactions and review details.

  • Preparing reviewed evidence for an Abridge support case
  • Documenting redactions and excluded data
  • Collecting approved operational details for an incident
jeremylongshore/tons-of-skills-marketplace2.9KUpdated Oct 23, 2026

See all skills by jeremylongshore

Report a problem with this skill