EnziVoltOPERATIONS CONTROL CENTRE · V15.1
PRODUCTION READINESS / প্রোডাকশন প্রস্তুতি

Operations Readiness Dashboard

Deployment, database, security, integration and release checks—এক জায়গায়। এখানে কোডে সম্পন্ন কাজ ও বাহ্যিক অ্যাকাউন্ট-নির্ভর কাজ আলাদা করে দেখানো হয়।

3Code & CI foundations / কোড ও CI ভিত্তি
8External setup gates / বাহ্যিক সেটআপ
0Live production verifications / লাইভ যাচাই
V15.1Current readiness milestone / বর্তমান ধাপ
Important / গুরুত্বপূর্ণ: “Implemented” মানে repository-তে কোড আছে; “Verified” মানে বাস্তব পরিবেশে পরীক্ষা হয়েছে। Backend URL, database credentials বা TLS certificate না থাকায় Live production status এখনো Pending। এই পেজ নিজে কোনো সার্ভার চালু বা ডেটাবেস তৈরি করে না।

Deployment & Operations Menu / ডিপ্লয়মেন্ট ও অপারেশন মেনু

প্রতিটি কার্ড খুলে কাজের ফল, অবস্থা ও পরবর্তী পদক্ষেপ দেখুন।

V15.0BackendIMPLEMENTED · CI PASS

Database Adapter & Migration System

ডেটাবেস অ্যাডাপ্টার ও মাইগ্রেশন ব্যবস্থা

SQLite/PostgreSQL dialect migration runner, migration history and PostgreSQL advisory lock.

Output · Status · Error Log · Test Report

Output: ordered migrations, schema_migrations tracking, query indexes.

Status: repository implementation merged; PR checks passed.

Error Log: earlier stale test expectations and Bandit false positive corrected.

Test Report: Backend Checks, Security Checks and Quality Gate passed on PR #21. Production database migration not yet run.

V15.0SecurityIMPLEMENTED · CI PASS

Security Baseline & CI Scans

নিরাপত্তা ভিত্তি ও স্বয়ংক্রিয় কোড পরীক্ষা

Static-site security headers, dependency audit, Bandit, compile checks and Dependabot.

Output · Status · Error Log · Test Report

Output: Netlify _headers, security workflow and weekly dependency updates.

Status: configuration committed.

Error Log: known CSP allowances remain for current inline scripts; API host-specific policy still needs tightening.

Test Report: pip-audit, Bandit and compileall passed in PR #21. Runtime penetration/security test pending.

V15.1FrontendMENU ADDED

Operations Readiness Menu

অপারেশন প্রস্তুতি মেনু

A searchable bilingual menu for outstanding deployment gates, outputs and test evidence.

Output · Status · Error Log · Test Report

Output: /operations/ dashboard linked from the homepage navigation.

Status: this feature branch adds the menu and dashboard.

Error Log: no runtime test has been performed in the hosted site yet.

Test Report: source-level review only; CI must run after PR creation.

V15.1HostingPENDING

Backend Hosting

Backend সার্ভার চালু করা

Deploy FastAPI backend to a selected HTTPS host and verify health endpoint.

Output · Status · Error Log · Test Report

Required: hosting account, service creation and environment configuration.

Status: Render deployment blueprint exists; no live service URL has been supplied.

Blocker: provider account access and deployment approval.

Test: GET /api/health must return healthy status.

V15.1PostgreSQLPENDING

Persistent PostgreSQL

স্থায়ী PostgreSQL ডেটাবেস

Provision a persistent database, configure DATABASE_URL and run forward migrations.

Output · Status · Error Log · Test Report

Required: database provider project and private connection string.

Status: adapter and migration runner are implemented; database not provisioned.

Blocker: account-side database setup and secret entry.

Test: migration history, read/write, restart persistence and backup restore.

V15.2API IntegrationPENDING

Website ↔ Backend Connection

ওয়েবসাইট ও Backend API সংযোগ

Configure the production API base URL and test customer request submission end-to-end.

Output · Status · Error Log · Test Report

Current: frontend API base is intentionally blank to prevent false success.

Required: deployed API HTTPS URL, CORS allow-origin and secret configuration.

Test: consent, request persistence, unique Request ID and admin retrieval.

V15.3HTTPSPENDING

TLS / Browser Padlock Verification

HTTPS সার্টিফিকেট ও ব্রাউজার নিরাপত্তা

Verify valid HTTPS certificate, redirects, HSTS and security headers for both frontend and API.

Output · Status · Error Log · Test Report

Important: padlock is issued by the hosting platform's TLS setup, not by HTML or JavaScript.

Status: static headers configured for Netlify; live domain/certificate not verified.

Test: certificate chain, expiry, HTTPS redirect and API headers.

V15.3Admin SecurityPENDING

Admin Authentication & Rate Limits

Admin লগইন ও API সুরক্ষা

Verify password hashing, session/token handling, authorization boundaries and abuse controls.

Output · Status · Error Log · Test Report

Required: production secrets and deployed runtime.

Test: unauthenticated access denial, role checks, rate limiting and audit events.

Safety: never paste passwords or API keys into chat or source code.

V15.4MonitoringPENDING

Live Health Monitoring

লাইভ সার্ভার স্বাস্থ্য পর্যবেক্ষণ

Enable scheduled backend health checks using the BACKEND_HEALTH_URL GitHub secret.

Output · Status · Error Log · Test Report

Current: scheduled workflow exists, but without the secret it reports NOT CONFIGURED.

Required: set secret directly in GitHub repository settings.

Test: verify scheduled run, failure alert and retained report artifact.

V15.4RecoveryPENDING

Backup & Recovery Drill

ডেটাবেস ব্যাকআপ ও পুনরুদ্ধার পরীক্ষা

Configure encrypted backups, retention and a documented restore test.

Output · Status · Error Log · Test Report

Required: persistent database and approved backup destination.

Test: restore to a separate test database and compare record counts.

V15.4QAPENDING

End-to-End & Mobile Testing

সম্পূর্ণ ব্যবহারকারী প্রবাহ ও মোবাইল পরীক্ষা

Test customer form, admin review, status update, responsive layouts and browser compatibility.

Output · Status · Error Log · Test Report

Test path: Customer Request → Request ID → Admin Review → Status Update → Customer Update.

Required: live API and test-only customer data.

V15.5ReleasePENDING

Performance, SEO & Production Release

গতি, SEO ও চূড়ান্ত রিলিজ

Check sitemap, robots, metadata, page performance, accessibility and final production deployment.

Output · Status · Error Log · Test Report

Required: production URL and full test evidence.

Release gate: no critical security findings, successful restore drill and verified customer workflow.