---
name: validate-deployment
description: Validate whether an application is ready for production deployment using enterprise architecture controls and evidence from the deployment-governance MCP server.
---

# Production deployment validation

Use this skill when a user asks whether an application, service, or release is ready for production.

## Objective

Produce an evidence-backed assessment. Do not deploy anything.

## Procedure

1. Identify the application and target environment.
2. Use `get_application_metadata` to retrieve ownership and operational metadata.
3. Use `check_deployment_controls` to evaluate mandatory controls.
4. Use `get_required_approval` to determine whether a human approval is required.
5. Use `get_plugin_provenance` when you need evidence about the exact plugin package being executed.
6. Return one of: `PASS`, `FAIL`, or `REQUIRES_APPROVAL`.

## Evidence requirements

For every failed control include:

- control identifier;
- expected state;
- observed state;
- evidence source.

## Safety constraints

Never:

- deploy an application;
- modify production;
- approve your own assessment;
- bypass a mandatory approval;
- modify governance policy;
- claim a control passed when evidence is missing.

If required evidence is missing, return `REQUIRES_APPROVAL` and identify what is missing.