{"id":"ops/go-live-checklist","relativePath":"ops/go-live-checklist.md","title":"Go-Live & Evidence-Pipeline Checklist","markdown":"# Go-Live & Evidence-Pipeline Checklist\n\nOperationalize the live Vercel deploy: finish auth, deploy the validation\nservice, and **start the 30-day evidence clock**. Companion to\n[deployment.md](../deployment.md).\n\nProduction URL: `https://www.metamuseum.org` (no trailing slash). Use this\ncanonical URL for Vercel, GitHub OAuth, GitHub Actions evidence variables, and\nlocal launch checks.\n\nVerified IIIF evidence tile: `https://iiif.micr.io/RFwqO/full/max/0/default.jpg`.\n\n---\n\n## 1. Vercel — finish the app config\n\nProject → Settings → Environment Variables (Production), then redeploy:\n\n| Var | Value | Why |\n|---|---|---|\n| `DATABASE_URL` | Neon pooled string with `sslmode=verify-full` | required for Postgres DR proof |\n| `METAMUSEUM_STORAGE_MODE` | `postgres` | already set |\n| `AUTH_SECRET` | (already set) | — |\n| `BASE_URL` | `https://www.metamuseum.org` | canonical URL, SLO target |\n| `METAMUSEUM_PUBLIC_READ_BASE_URL` | `https://www.metamuseum.org` | uptime/probe target and Open Graph metadata base; must exactly match `BASE_URL` |\n| `AUTH_GITHUB_ID` | GitHub OAuth app client ID | enables sign-in |\n| `AUTH_GITHUB_SECRET` | GitHub OAuth app secret | (pair for the above) |\n| `VALIDATION_SERVICE_URL` | `https://metamuseum-validation.onrender.com/validate` | after step 2 |\n| `RECONCILIATION_SERVICE_URL` | `https://metamuseum-reconciliation.onrender.com` | optional service probe/evidence |\n| `METAMUSEUM_EXTERNAL_SERVICE_PROBE_TIMEOUT_MS` | `45000` | external service cold-start window |\n\nAlso: **Settings → Deployment Protection → Vercel Authentication → Disabled**\n(so the public can reach the read-only demo). `pnpm launch:preflight:production`\nnow probes `/`, `/api/health`, `/api/auth/signin`, and `/api/auth/session`\non the configured public URL and fails if Vercel Authentication or another\nprotection wall blocks public reads or auth routes.\nIt also fetches `IIIF_TILE_URL`, so k6 tile-serving evidence cannot quietly\npoint at a broken, private, or non-HTTP image target.\nIt also fails production when `BASE_URL` and\n`METAMUSEUM_PUBLIC_READ_BASE_URL` are missing or not the same shareable URL,\nbecause crawlers resolve absolute Open Graph images from that base.\n\nAfter every domain change: redeploy, run\n`BASE_URL=https://www.metamuseum.org METAMUSEUM_PUBLIC_READ_BASE_URL=https://www.metamuseum.org IIIF_TILE_URL=https://iiif.micr.io/RFwqO/full/max/0/default.jpg VALIDATION_SERVICE_URL=https://metamuseum-validation.onrender.com/validate RECONCILIATION_SERVICE_URL=https://metamuseum-reconciliation.onrender.com pnpm launch:preflight:production`,\nthen run `BASE_URL=https://www.metamuseum.org pnpm smoke:crawler-preview`.\nThe smoke writes `artifacts/launch/crawler-preview-latest.json` and checks\nFacebook, Slack, Googlebot, LinkedIn, and X/Twitter-facing\nOpen Graph/Twitter/canonical metadata plus preview image fetchability. Refresh\nthe homepage in Facebook Sharing Debugger and the equivalent LinkedIn/X preview\ntools before sharing public links.\nFor a full evidence refresh, prefer\n`pnpm launch:evidence:production -- --base-url=https://www.metamuseum.org --public-read-base-url=https://www.metamuseum.org --iiif-tile-url=https://iiif.micr.io/RFwqO/full/max/0/default.jpg --validation-service-url=https://metamuseum-validation.onrender.com/validate --reconciliation-service-url=https://metamuseum-reconciliation.onrender.com`;\nit runs hardening security/DR evidence, the preflight, public trust, crawler\npreview, a11y, explore, k6, Era C exit-gate, and launch-review steps while writing\n`artifacts/launch/launch-evidence-latest.json`.\n\nIf `VALIDATION_SERVICE_URL` or `RECONCILIATION_SERVICE_URL` is configured,\n`pnpm launch:preflight:production` also probes the matching Render `/health`\nendpoint and records status plus duration. The Render probe timeout can be long\nenough to observe cold starts, but user-facing strict validation is stricter:\nproduction preflight fails a Render-hosted `VALIDATION_SERVICE_URL` unless\n`METAMUSEUM_VALIDATION_SERVICE_CAPACITY=paid` proves no-sleep capacity and the\nhealth duration is within `METAMUSEUM_VALIDATION_SERVICE_MAX_HEALTH_MS`.\nLeave the URLs unset only when the local fallback mode is intentional:\nnon-strict validation uses the local Linked Art profile fallback, strict\n`/api/validate` still needs a running validation service, and reconciliation\nstays in-process.\n\nWorker-dependent features are scheduled drains, not persistent Vercel\nprocesses. After any `METAMUSEUM_OUTBOX_CRON_ENABLED`,\n`OUTBOX_PROJECT_TO_SOLR`, `OUTBOX_PROJECT_TO_GRAPHDB`, or\n`METAMUSEUM_PUBLISH_QUEUE_CRON_ENABLED` change, open `/workers` and verify\nworker lag, next cron wakeup, effective next drain, and disabled modes before\nclaiming projection or publishing progress. Production preflight fails when\nprojection targets are enabled without `CRON_SECRET` plus\n`METAMUSEUM_OUTBOX_CRON_ENABLED=1`, or when live MediaWiki/Wikibase endpoints\nor bot tokens are configured without `CRON_SECRET` plus\n`METAMUSEUM_PUBLISH_QUEUE_CRON_ENABLED=1`.\n\nBefore setting `OUTBOX_PROJECT_TO_SOLR=1` or `OUTBOX_PROJECT_TO_GRAPHDB=1`, run\n`pnpm projection:readiness` with current discovery/search/graph metrics. Treat\n`portable` as keep-disabled, `watch` as prepare credentials/backfill, `enable`\nas the point where Solr/GraphDB target flags may be turned on after the\nscheduled outbox drain is ready, and `enabled` as the monitoring state after\nthe scale path is active.\n\nGitHub OAuth app: https://github.com/settings/developers → New OAuth App →\nHomepage `https://www.metamuseum.org`, callback\n`https://www.metamuseum.org/api/auth/callback/github`.\n\n---\n\n## 2. Render — validation and reconciliation services\n\nThe data-quality report (validation) is the literal pilot deliverable, and the\nreconciliation service backs authority lookup evidence. Both Render services\nare deployed from `render.yaml`; the AG2 worker is intentionally excluded.\n\n1. Validation: `https://metamuseum-validation.onrender.com/health`.\n2. Reconciliation: `https://metamuseum-reconciliation.onrender.com/health`.\n3. Set `VALIDATION_SERVICE_URL=https://metamuseum-validation.onrender.com/validate`\n on Vercel.\n4. Upgrade the validation service off sleeping/free-tier capacity before public\n strict validation, then set `METAMUSEUM_VALIDATION_SERVICE_CAPACITY=paid`.\n5. Set `RECONCILIATION_SERVICE_URL=https://metamuseum-reconciliation.onrender.com`\n on Vercel so preflight records its `/health` probe too.\n\n> Free Render web services cold-start in ~30–60s. Fine for demos and rehearsal\n> evidence, but public strict `/api/validate` should stay off sleeping capacity.\n\n---\n\n## 3. GitHub Actions — start the evidence clock\n\nThe nightly `era-c-exit-gate-evidence.yml` workflow reads these. Set under\n**Settings → Secrets and variables → Actions**.\n\n### Variables (Repository variables) — minimum to start k6 + AI evidence\n| Variable | Value | Unlocks |\n|---|---|---|\n| `METAMUSEUM_EVIDENCE_BASE_URL` | `https://www.metamuseum.org` | k6 SLO + AI-query evidence |\n| `METAMUSEUM_PUBLIC_READ_BASE_URL` | `https://www.metamuseum.org` | uptime probe target |\n| `METAMUSEUM_EVIDENCE_IIIF_TILE_URL` | `https://iiif.micr.io/RFwqO/full/max/0/default.jpg` | required gate for the k6 step |\n\nWith just those three, the nightly run begins retaining k6 p95 samples and AI\ncost telemetry. `SPARQL_URL` defaults to\n`https://www.metamuseum.org/api/getty/sparql`.\n\nCLI:\n```bash\ngh variable set METAMUSEUM_EVIDENCE_BASE_URL --body \"https://www.metamuseum.org\"\ngh variable set METAMUSEUM_PUBLIC_READ_BASE_URL --body \"https://www.metamuseum.org\"\ngh variable set METAMUSEUM_EVIDENCE_IIIF_TILE_URL --body \"https://iiif.micr.io/RFwqO/full/max/0/default.jpg\"\n```\n\n### Still gated (separate workstreams, not just config)\n| Evidence | Needs | Note |\n|---|---|---|\n| Public-read uptime (99.9% / 30d) | `METAMUSEUM_UPTIME_PROMETHEUS_URL` (secret) + `METAMUSEUM_UPTIME_PROMQL_*` vars | requires a Prometheus/monitoring backend scraping the app — infra decision |\n| Activity-feed adoption (3/3) | `METAMUSEUM_ACTIVITY_CONSUMER_IDS` | requires 3 real external consumers sending `x-linked-art-consumer-id` — partnerships, not config |\n| SOTA §26 KPIs | production export to `monitoring/kpi-evidence.json` | record-enrichment + reconciliation review counts |\n\n---\n\n## Sequence\n\n1. Verify Vercel env vars + GitHub OAuth + Deployment Protection state + social\n preview base URL parity plus Auth.js route reachability → run\n `pnpm launch:evidence:production -- --base-url=https://www.metamuseum.org --public-read-base-url=https://www.metamuseum.org --iiif-tile-url=https://iiif.micr.io/RFwqO/full/max/0/default.jpg --validation-service-url=https://metamuseum-validation.onrender.com/validate --reconciliation-service-url=https://metamuseum-reconciliation.onrender.com`\n to refresh the full blocker-preserving evidence packet.\n2. If running commands manually, verify Vercel env vars + GitHub OAuth +\n Deployment Protection state + social\n preview base URL parity + fetchable IIIF tile target → rerun\n `BASE_URL=https://www.metamuseum.org METAMUSEUM_PUBLIC_READ_BASE_URL=https://www.metamuseum.org IIIF_TILE_URL=https://iiif.micr.io/RFwqO/full/max/0/default.jpg VALIDATION_SERVICE_URL=https://metamuseum-validation.onrender.com/validate RECONCILIATION_SERVICE_URL=https://metamuseum-reconciliation.onrender.com pnpm launch:preflight:production`\n and `BASE_URL=https://www.metamuseum.org pnpm smoke:crawler-preview`\n before launch review. Treat `pnpm review:goals:check` as the authority for\n whether the current launch evidence is green; a stale preflight note cannot\n override unresolved deployment-environment or real-world blockers.\n Refresh crawler previews after every domain change.\n3. Keep the deployed validation/reconciliation service URLs set on Vercel and\n rerun preflight after any Render redeploy so the external service probes are\n in evidence.\n4. Set the 3 GitHub evidence variables → the nightly clock starts.\n5. For any enabled projection or publishing feature, verify `/workers` shows an\n effective next drain time and no blocked/dead-letter status.\n6. Decide the uptime-monitoring approach (Prometheus stack) and begin partner\n outreach for the 3 activity consumers — these are the long-pole 30-day gates.\n","sections":[{"level":2,"heading":"1. Vercel — finish the app config","anchor":"1-vercel-finish-the-app-config"},{"level":2,"heading":"2. Render — validation and reconciliation services","anchor":"2-render-validation-and-reconciliation-services"},{"level":2,"heading":"3. GitHub Actions — start the evidence clock","anchor":"3-github-actions-start-the-evidence-clock"},{"level":3,"heading":"Variables (Repository variables) — minimum to start k6 + AI evidence","anchor":"variables-repository-variables-minimum-to-start-k6-ai-evidence"},{"level":3,"heading":"Still gated (separate workstreams, not just config)","anchor":"still-gated-separate-workstreams-not-just-config"},{"level":2,"heading":"Sequence","anchor":"sequence"}],"html":"

Go-Live & Evidence-Pipeline Checklist

\n

Operationalize the live Vercel deploy: finish auth, deploy the validation

\n

service, and start the 30-day evidence clock. Companion to

\n

deployment.md(../deployment.md).

\n

Production URL: `https://www.metamuseum.org` (no trailing slash). Use this

\n

canonical URL for Vercel, GitHub OAuth, GitHub Actions evidence variables, and

\n

local launch checks.

\n

Verified IIIF evidence tile: `https://iiif.micr.io/RFwqO/full/max/0/default.jpg`.

\n

---

\n

1. Vercel — finish the app config

\n

Project → Settings → Environment Variables (Production), then redeploy:

\n

| Var | Value | Why |

\n

|---|---|---|

\n

| `DATABASE_URL` | Neon pooled string with `sslmode=verify-full` | required for Postgres DR proof |

\n

| `METAMUSEUM_STORAGE_MODE` | `postgres` | already set |

\n

| `AUTH_SECRET` | (already set) | — |

\n

| `BASE_URL` | `https://www.metamuseum.org` | canonical URL, SLO target |

\n

| `METAMUSEUM_PUBLIC_READ_BASE_URL` | `https://www.metamuseum.org` | uptime/probe target and Open Graph metadata base; must exactly match `BASE_URL` |

\n

| `AUTH_GITHUB_ID` | GitHub OAuth app client ID | enables sign-in |

\n

| `AUTH_GITHUB_SECRET` | GitHub OAuth app secret | (pair for the above) |

\n

| `VALIDATION_SERVICE_URL` | `https://metamuseum-validation.onrender.com/validate` | after step 2 |

\n

| `RECONCILIATION_SERVICE_URL` | `https://metamuseum-reconciliation.onrender.com` | optional service probe/evidence |

\n

| `METAMUSEUM_EXTERNAL_SERVICE_PROBE_TIMEOUT_MS` | `45000` | external service cold-start window |

\n

Also: Settings → Deployment Protection → Vercel Authentication → Disabled

\n

(so the public can reach the read-only demo). `pnpm launch:preflight:production`

\n

now probes `/`, `/api/health`, `/api/auth/signin`, and `/api/auth/session`

\n

on the configured public URL and fails if Vercel Authentication or another

\n

protection wall blocks public reads or auth routes.

\n

It also fetches `IIIF_TILE_URL`, so k6 tile-serving evidence cannot quietly

\n

point at a broken, private, or non-HTTP image target.

\n

It also fails production when `BASE_URL` and

\n

`METAMUSEUM_PUBLIC_READ_BASE_URL` are missing or not the same shareable URL,

\n

because crawlers resolve absolute Open Graph images from that base.

\n

After every domain change: redeploy, run

\n

`BASE_URL=https://www.metamuseum.org METAMUSEUM_PUBLIC_READ_BASE_URL=https://www.metamuseum.org IIIF_TILE_URL=https://iiif.micr.io/RFwqO/full/max/0/default.jpg VALIDATION_SERVICE_URL=https://metamuseum-validation.onrender.com/validate RECONCILIATION_SERVICE_URL=https://metamuseum-reconciliation.onrender.com pnpm launch:preflight:production`,

\n

then run `BASE_URL=https://www.metamuseum.org pnpm smoke:crawler-preview`.

\n

The smoke writes `artifacts/launch/crawler-preview-latest.json` and checks

\n

Facebook, Slack, Googlebot, LinkedIn, and X/Twitter-facing

\n

Open Graph/Twitter/canonical metadata plus preview image fetchability. Refresh

\n

the homepage in Facebook Sharing Debugger and the equivalent LinkedIn/X preview

\n

tools before sharing public links.

\n

For a full evidence refresh, prefer

\n

`pnpm launch:evidence:production -- --base-url=https://www.metamuseum.org --public-read-base-url=https://www.metamuseum.org --iiif-tile-url=https://iiif.micr.io/RFwqO/full/max/0/default.jpg --validation-service-url=https://metamuseum-validation.onrender.com/validate --reconciliation-service-url=https://metamuseum-reconciliation.onrender.com`;

\n

it runs hardening security/DR evidence, the preflight, public trust, crawler

\n

preview, a11y, explore, k6, Era C exit-gate, and launch-review steps while writing

\n

`artifacts/launch/launch-evidence-latest.json`.

\n

If `VALIDATION_SERVICE_URL` or `RECONCILIATION_SERVICE_URL` is configured,

\n

`pnpm launch:preflight:production` also probes the matching Render `/health`

\n

endpoint and records status plus duration. The Render probe timeout can be long

\n

enough to observe cold starts, but user-facing strict validation is stricter:

\n

production preflight fails a Render-hosted `VALIDATION_SERVICE_URL` unless

\n

`METAMUSEUM_VALIDATION_SERVICE_CAPACITY=paid` proves no-sleep capacity and the

\n

health duration is within `METAMUSEUM_VALIDATION_SERVICE_MAX_HEALTH_MS`.

\n

Leave the URLs unset only when the local fallback mode is intentional:

\n

non-strict validation uses the local Linked Art profile fallback, strict

\n

`/api/validate` still needs a running validation service, and reconciliation

\n

stays in-process.

\n

Worker-dependent features are scheduled drains, not persistent Vercel

\n

processes. After any `METAMUSEUM_OUTBOX_CRON_ENABLED`,

\n

`OUTBOX_PROJECT_TO_SOLR`, `OUTBOX_PROJECT_TO_GRAPHDB`, or

\n

`METAMUSEUM_PUBLISH_QUEUE_CRON_ENABLED` change, open `/workers` and verify

\n

worker lag, next cron wakeup, effective next drain, and disabled modes before

\n

claiming projection or publishing progress. Production preflight fails when

\n

projection targets are enabled without `CRON_SECRET` plus

\n

`METAMUSEUM_OUTBOX_CRON_ENABLED=1`, or when live MediaWiki/Wikibase endpoints

\n

or bot tokens are configured without `CRON_SECRET` plus

\n

`METAMUSEUM_PUBLISH_QUEUE_CRON_ENABLED=1`.

\n

Before setting `OUTBOX_PROJECT_TO_SOLR=1` or `OUTBOX_PROJECT_TO_GRAPHDB=1`, run

\n

`pnpm projection:readiness` with current discovery/search/graph metrics. Treat

\n

`portable` as keep-disabled, `watch` as prepare credentials/backfill, `enable`

\n

as the point where Solr/GraphDB target flags may be turned on after the

\n

scheduled outbox drain is ready, and `enabled` as the monitoring state after

\n

the scale path is active.

\n

GitHub OAuth app: https://github.com/settings/developers → New OAuth App →

\n

Homepage `https://www.metamuseum.org`, callback

\n

`https://www.metamuseum.org/api/auth/callback/github`.

\n

---

\n

2. Render — validation and reconciliation services

\n

The data-quality report (validation) is the literal pilot deliverable, and the

\n

reconciliation service backs authority lookup evidence. Both Render services

\n

are deployed from `render.yaml`; the AG2 worker is intentionally excluded.

\n
  1. Validation: `https://metamuseum-validation.onrender.com/health`.
\n
  1. Reconciliation: `https://metamuseum-reconciliation.onrender.com/health`.
\n
  1. Set `VALIDATION_SERVICE_URL=https://metamuseum-validation.onrender.com/validate`
\n

on Vercel.

\n
  1. Upgrade the validation service off sleeping/free-tier capacity before public
\n

strict validation, then set `METAMUSEUM_VALIDATION_SERVICE_CAPACITY=paid`.

\n
  1. Set `RECONCILIATION_SERVICE_URL=https://metamuseum-reconciliation.onrender.com`
\n

on Vercel so preflight records its `/health` probe too.

\n
Free Render web services cold-start in ~30–60s. Fine for demos and rehearsal
\n
evidence, but public strict `/api/validate` should stay off sleeping capacity.
\n

---

\n

3. GitHub Actions — start the evidence clock

\n

The nightly `era-c-exit-gate-evidence.yml` workflow reads these. Set under

\n

Settings → Secrets and variables → Actions.

\n

Variables (Repository variables) — minimum to start k6 + AI evidence

\n

| Variable | Value | Unlocks |

\n

|---|---|---|

\n

| `METAMUSEUM_EVIDENCE_BASE_URL` | `https://www.metamuseum.org` | k6 SLO + AI-query evidence |

\n

| `METAMUSEUM_PUBLIC_READ_BASE_URL` | `https://www.metamuseum.org` | uptime probe target |

\n

| `METAMUSEUM_EVIDENCE_IIIF_TILE_URL` | `https://iiif.micr.io/RFwqO/full/max/0/default.jpg` | required gate for the k6 step |

\n

With just those three, the nightly run begins retaining k6 p95 samples and AI

\n

cost telemetry. `SPARQL_URL` defaults to

\n

`https://www.metamuseum.org/api/getty/sparql`.

\n

CLI:

\n
\ngh variable set METAMUSEUM_EVIDENCE_BASE_URL --body "https://www.metamuseum.org"\ngh variable set METAMUSEUM_PUBLIC_READ_BASE_URL --body "https://www.metamuseum.org"\ngh variable set METAMUSEUM_EVIDENCE_IIIF_TILE_URL --body "https://iiif.micr.io/RFwqO/full/max/0/default.jpg"\n
\n

Still gated (separate workstreams, not just config)

\n

| Evidence | Needs | Note |

\n

|---|---|---|

\n

| Public-read uptime (99.9% / 30d) | `METAMUSEUM_UPTIME_PROMETHEUS_URL` (secret) + `METAMUSEUM_UPTIME_PROMQL_*` vars | requires a Prometheus/monitoring backend scraping the app — infra decision |

\n

| Activity-feed adoption (3/3) | `METAMUSEUM_ACTIVITY_CONSUMER_IDS` | requires 3 real external consumers sending `x-linked-art-consumer-id` — partnerships, not config |

\n

| SOTA §26 KPIs | production export to `monitoring/kpi-evidence.json` | record-enrichment + reconciliation review counts |

\n

---

\n

Sequence

\n
  1. Verify Vercel env vars + GitHub OAuth + Deployment Protection state + social
\n

preview base URL parity plus Auth.js route reachability → run

\n

`pnpm launch:evidence:production -- --base-url=https://www.metamuseum.org --public-read-base-url=https://www.metamuseum.org --iiif-tile-url=https://iiif.micr.io/RFwqO/full/max/0/default.jpg --validation-service-url=https://metamuseum-validation.onrender.com/validate --reconciliation-service-url=https://metamuseum-reconciliation.onrender.com`

\n

to refresh the full blocker-preserving evidence packet.

\n
  1. If running commands manually, verify Vercel env vars + GitHub OAuth +
\n

Deployment Protection state + social

\n

preview base URL parity + fetchable IIIF tile target → rerun

\n

`BASE_URL=https://www.metamuseum.org METAMUSEUM_PUBLIC_READ_BASE_URL=https://www.metamuseum.org IIIF_TILE_URL=https://iiif.micr.io/RFwqO/full/max/0/default.jpg VALIDATION_SERVICE_URL=https://metamuseum-validation.onrender.com/validate RECONCILIATION_SERVICE_URL=https://metamuseum-reconciliation.onrender.com pnpm launch:preflight:production`

\n

and `BASE_URL=https://www.metamuseum.org pnpm smoke:crawler-preview`

\n

before launch review. Treat `pnpm review:goals:check` as the authority for

\n

whether the current launch evidence is green; a stale preflight note cannot

\n

override unresolved deployment-environment or real-world blockers.

\n

Refresh crawler previews after every domain change.

\n
  1. Keep the deployed validation/reconciliation service URLs set on Vercel and
\n

rerun preflight after any Render redeploy so the external service probes are

\n

in evidence.

\n
  1. Set the 3 GitHub evidence variables → the nightly clock starts.
\n
  1. For any enabled projection or publishing feature, verify `/workers` shows an
\n

effective next drain time and no blocked/dead-letter status.

\n
  1. Decide the uptime-monitoring approach (Prometheus stack) and begin partner
\n

outreach for the 3 activity consumers — these are the long-pole 30-day gates.

","updatedAt":"2018-10-20T01:46:40.000Z","checksum":"621cddad10fb341b46418a400925be0654411d0608372eb745380bbdb69ef1bb","checksumPrefix":"621cddad10fb","anchorCount":6,"lineCount":168,"rawUrl":"/api/docs/content?path=ops%2Fgo-live-checklist.md","htmlUrl":"/docs?doc=ops%2Fgo-live-checklist.md","apiUrl":"/api/docs/content?path=ops%2Fgo-live-checklist.md"}