TokenPad

160 checks

Checklists

The work that gets skipped is the work nobody wrote down. Each of these is a list of things you can verify — not things you can agree with — with the reason each one is there and the tool that checks it.

Ticks persist in your browser. No account, nothing sent anywhere.

Shipping

Cost

Quality

Safety

Why a checklist and not a guide

A guide is read once, by someone learning. A checklist is opened every time the same work happens again — before a launch, during a review, at the point where somebody has to say yes.

That is why every item here is written as a statement you can be wrong about. “Consider rate limiting” cannot be ticked honestly. “A single user cannot exceed a defined request rate” can only be ticked if someone goes and looks.

Where to start

If something is going live soon, start with the production readiness list and do the six items marked critical. Those six prevent most of what goes wrong in a first month of real traffic.

If the bill is the problem, the cost control list is ordered by saving per hour of effort — the first five items are configuration changes rather than rewrites.

If a model is about to get tools and credentials, the agent safety list is the one to do before it has write access rather than after.

Using these in a team

The two useful habits: paste the outstanding items into the pull request that ships the feature, and add a line to the list every time something goes wrong that the list would not have caught. A checklist that never grows is a checklist that stopped describing your system.

Every page has a “copy what is left” button that produces markdown checkboxes for exactly that.