Content and URLs
[ ] Content migrated and accepted (Content migration checklist)
[ ] Old addresses redirect; no important 404s

Accounts and roles
[ ] Default and test accounts removed or disabled; administrator password changed
[ ] Roles and permissions set for every group (Roles and permissions for the rollout)
[ ] Two-step sign-in for administrators, if used

Security
[ ] Hardening applied (Security hardening, chapter 13 of the installation book)
[ ] PHP and Exponential on supported versions
[ ] Not running in demo mode

Operations
[ ] Backups scheduled AND one restore tested
[ ] Monitoring of availability and errors in place
[ ] Caches configured; speed checked under expected load
[ ] Maintenance mode tested

People
[ ] Editors trained close to launch
[ ] Support contacts and escalation known
[ ] Owner has accepted the site

[ ] Content freeze in place; final migration run
[ ] Smoke test: front page, a page per content type, search, a form, sign-in, checkout
[ ] Error log empty of new errors
[ ] DNS or proxy switched; HTTPS valid
[ ] Announcement to editors and users

[ ] Error log and 404s read every day
[ ] Editor questions collected and answered
[ ] First backup after launch restored on a test system
[ ] Old site kept read-only until acceptance