Production checklist
Pre-launch verification for production deployments.
- Set
SWARM_API_KEYandSWARM_REQUIRE_AUTH=1 - Restrict CORS via
ALLOWED_ORIGINS - Keep Bash disabled or HITL-enabled
- Set rate limits
- Verify
/api/healthreturns agents=357 - Run verification scorecard