Production Checklist

Use this checklist before sending real customer email.

Domain identity

• The sending domain verifies in PING8.
• A record points to the intended mail host.
• MX record points to the intended mail host.
• SPF authorizes the actual outbound path.
• DKIM verifies with the correct selector.
• DMARC exists and starts at a test-safe policy.
• PTR/rDNS matches the outbound mail host.

Sending path

• Delivery engine is selected intentionally.
• Tenant default points to the intended engine/profile.
• KumoMTA connection test passes if using KumoMTA.
• Webhook lifecycle events are visible if using KumoMTA.
• Local Postfix or SMTP queues are clear before launch.

Contacts and compliance

• Contacts are permission-based.
• Suppression and unsubscribe lists are enabled.
• Marketing campaigns include unsubscribe links.
• Tracking is disclosed in privacy notices where required.
• Test recipients are separated from real audiences.

Content

• Template preview renders correctly.
• Plain text fallback exists when appropriate.
• Subject line is clear and not misleading.
• Links use trusted domains.
• Images have alt text.

Launch process

1. Send a test email to yourself.
2. Send a test to Gmail.
3. Send a test to one non-Gmail provider.
4. Confirm delivery telemetry.
5. Launch a small segment.
6. Review bounces, deferrals, opens, and complaints.
7. Increase volume gradually.

Operational readiness

• Operation logs are available.
• Failed-send details are visible.
• Queue controls are understood by the operator.
• Alerting is configured.
• Backup and rollback procedures exist.

KumoMTA readiness

If you use KumoMTA:

• Connection test passes.
• Policy preview has no unresolved production warnings.
• Dry run succeeds.
• Webhook events update PING8 after a one-recipient send.
• Queue age stays low during a small test group.
• Provider-specific deferrals are understood before increasing volume.

Final go/no-go

Go when:

• Domain identity is green.
• One-recipient sends work through the intended engine.
• Lifecycle telemetry returns.
• Suppression is active.
• Operators know where to read failures.

Do not go when:

• DNS is partially verified.
• KumoMTA accepts messages but events do not return.
• Test sends show generic configuration errors.
• You cannot identify the actual outbound IP and PTR.
• A new list has not been quality-checked.