1. Select hosting provider and provision persistent PostgreSQL — external account setup.
2. Add secrets securely in provider settings: DATABASE_URL, ENZIVOLT_ADMIN_PASSWORD, ENZIVOLT_ALLOWED_ORIGINS — never in source code or chat.
3. Deploy backend and verify HTTPS GET /api/health returns status=ok.
4. Set the public frontend API base URL to the verified HTTPS backend origin; redeploy the website.
5. Run synthetic customer request → Request ID → admin login → request list → status update → audit/automation check.
6. Verify persistence after restart, CORS, rate limits, backups and restore.
7. Configure approved notification provider and test delivery; enable cloud AI only after provider setup and safety review.
8. Run mobile/browser accessibility, performance, security and final release tests. Mark each module LIVE only with evidence.
Current release decision: Engineering Workspace and Master Integration merged. Synthetic customer-to-admin E2E passed in CI on an isolated test database. Production backend, PostgreSQL and live customer/admin E2E are BLOCKED by external hosting/database setup. No live deployment claim is made.