KONZA Health Production Go-Live Runbook
Tuesday cutover checklist — seed, activate, smoke test, and monitor KONZA QHIN exchange in production.
- 1
Pre-flight (before Tuesday)
Complete KONZA onboarding and receive production XCPD/XCA/FHIR endpoint URLs and OID confirmation. Install mTLS certificates (Parker client cert + KONZA partner CA). Set all KONZA_* variables in production .env.
- 2
Sandbox validation
Validate the full exchange flow in sandbox before production cutover.
bashpython apex/scripts/seed_konza_sandbox.py "text">-command-muted italic"># Use /tefca#exchange"text-cyan-300">-playground — Steps 1–4 (directory → XCPD → XCA → retrieve) "text">-command-muted italic"># Register webhooks at /webhooks#register for tefca.exchange.completed - 3
Seed production KONZA (testing status)
With production endpoint URLs in .env, seed the partner record. Status remains testing until activate — not listed in public directory yet.
bash"text">-amber-300 font">-semibold">export KONZA_QHIN_STATUS=testing python apex/scripts/seed_konza_qhin.py - 4
Production smoke test (pre-activate)
Run outbound XCPD and XCA against production KONZA endpoints with a test GPID while status=testing. Verify mTLS handshake and POU audit logging via GET /tefca/exchanges.
- 5
Tuesday activate
On go-live day, activate KONZA in the public directory and run the automated cutover script.
bash./scripts/konza_go_live.sh "text">-command-muted italic"># Or manually: python apex/scripts/seed_konza_qhin.py "text-cyan-300">--activate - 6
Post go-live verification
Confirm KONZA appears in GET /tefca/directory, /status shows operational, and production partner traffic succeeds. Submit certification checklist at /certification.
bash"text">-amber-300 font">-semibold">curl "text-cyan-300">-s https://api.parkerapex.com/tefca/partners/konza/health | "text">-amber-300 font">-semibold">jq . "text">-amber-300 font">-semibold">curl "text-cyan-300">-s https://developers.parkerapex.com/api/health/konza | "text">-amber-300 font">-semibold">jq . - 7
Rollback plan
If cutover fails: set KONZA_QHIN_STATUS=testing, re-run seed without --activate, and disable outbound routing in runbook. Parker inbound XCPD/XCA remains available; outbound returns partner-not-found until re-activated.