Skip to main content

Go-live checklist

Complete UAT validation before Lynq issues production credentials and enables live traffic.

Integration requirements​

  • Quotes bound with quote_id where pricing must be fixed at checkout
  • Orders use unique partner_order_number values with idempotent retries
  • Webhook listener verifies X-Lynq-Signature on raw bodies
  • Webhook handler is idempotent on envelope id
  • tracking.courier_locations subscribed if your UX needs live maps
  • Multi-leg flows tested if applicable (1–10 pickups)
  • Error handling for 503 distance_unavailable on quotes

Security and operations​

  • API keys stored in a secrets manager (not source control)
  • Production keys restricted to server-side runtimes
  • IP allowlist documented if enforced
  • Webhook URL uses TLS 1.2+ with valid certificate chain
  • On-call runbook includes Lynq support contact and sample event IDs

Environments​

CheckUATProduction
Base URLhttps://uat-api.lynq-sa.com/partnerhttps://api.lynq-sa.com/partner
livemode in webhooksfalsetrue
Rate limitsRelaxed for testingAs contracted

Sign-off​

Schedule a go-live review with Lynq integrations. Provide:

  1. Sample UAT order ULIDs and webhook delivery IDs
  2. Evidence of signature verification (logs or test output)
  3. Expected peak order volume and webhook QPS

After approval, rotate off UAT keys in production configs and update monitoring dashboards.