Integration checklist

Before production rollout, verify all of the following.

• A private Integration API key is stored only server-side.
• GET /context confirms the key reaches the expected organization.
• Provisioning returns and persists the expected surveyId and public embed values.
• Every response has a platform-generated UUID mapped to sessionId and interviewId.
• The embed is present on each survey page with the chosen privacy controls.
• CSP allows the exact Embed script-src and collector connect-src origins.
• A test response becomes captured: true through session lookup.
• An authorized administrator can start a scoring run, poll it, and view the result.
• The platform respects the 120-requests-per-key-per-minute rate limit and Retry-After.
• A deleted test response reaches completed Ramon deletion synchronization.
• Participant-facing outages remain fail-open and operational failures are monitored.