Service details
- Service name
- Owning team
- What it does, in one sentence
Services reach production without on-call ownership, alerts, or runbooks because nothing blocks them. A readiness review is only useful if it is a gate with an owner who can say no, not a form filled in afterwards.
Run it before launch, not after. A review completed after a service is live is documentation, not a gate. Schedule it two to four weeks before launch so findings can actually be fixed.
Separate must-have from should-have honestly. If everything blocks launch, the review gets bypassed under pressure. Keep the must-have list short enough that it is genuinely non-negotiable.
Time-box every exception. Launches happen with gaps. Record the gap, who accepted it, what compensates, and when it will be closed, otherwise the gap becomes permanent and invisible.
Here's a preview. Unlock the free download to get all 5 sections (4 more below).
More free templates IT teams use alongside this one.
A runbook is read by a tired person at 03:00 who did not write it and does not know this service. That single constraint rules out most of what people put in runbooks: architecture background, rationale, and anything written in prose when it could have been a command.
A pipeline has production credentials and the authority to ship code, which makes it one of the most privileged systems you run, and usually one of the least reviewed.
Most SLOs are picked because 99.9% sounds respectable, then never referenced again. An SLO is only useful if a specific number of bad minutes triggers a specific decision, so this worksheet makes you write the error budget policy before you pick the target.
A gate before a service enters production, checking reliability, observability, security, and operability criteria. Its value comes from being a gate with an owner who can withhold approval, rather than a form completed after launch.
A short, genuinely non-negotiable list: named ownership and on-call coverage, user-facing alerts, a tested runbook, logging, backups with a tested restore, a tested rollback, secrets in a vault, and authentication on every endpoint.
Record each gap as an exception with a compensating control, a named accepter, and a fix date. Launching with known gaps is normal; launching with undocumented gaps is how services end up permanently unmonitored.