Go-live checklist

1. Send one request per application, with your own unique record id as call.id.
2. Set consent.sms_review_link: true only after the customer agrees to be texted. It controls the text only; the email goes whenever you send customer.email, so capture an email to make sure the link arrives.
3. Keep the API key on your server, and use the live key only in production.
4. Store clientRef from each response against your record of the customer.
5. Use the exact code values for enum fields. Free text is kept, but the customer has to correct it on the review page.
6. Retry 429, 5xx and timeouts with the same call.id.
7. Check warnings and missingCriticalFields in each response, and fix the data you send when they repeat.
8. Run your integration end to end with a test key, including a retry, before switching to the live key.