# Production release implementation
Target: trusted Linux web services, MongoDB, implicit async, documented breaking changes.
This checklist records verified work, not a production certification.
## Latest validation checkpoint
- The two-process Twitter integration scenario passed before the dependency refresh.
- Cancellation during task draining now aborts the drained children; a regression
test reproduces the formerly orphaned-task case.
- The compatible dependency refresh passed 61 tests (one live MongoDB test ignored).
- Migrated MongoDB from driver 2.8 to the 3.x action API, following the
[official migration guide](https://github.com/mongodb/mongo-rust-driver/blob/main/migration-3.0.md).
- After that migration, all 61 ordinary tests pass, and the isolated live MongoDB
session/CRUD test passes. RustSec reports no advisories or yanked-version
warnings for the 328 locked dependencies checked on September 7, 2026.
- Release remains gated on protocol hardening, release/CI tooling, fuzzing and
the full 60-minute soak. Earlier binary integration results do not certify the
updated dependency build.
## Release gates
- [ ] Execution-owned environments and application-owned routing
- [ ] Shared eager async results, supervision, cancellation and deadlines
- [ ] Lexical scopes, namespaced imports, structured diagnostics and cleanup
- [ ] Practical collections, environment access and explicit templates
- [ ] CLI checking, formatting and test discovery
- [ ] HTTP limits, error sanitization, consistent JSON and request isolation
- [ ] Secure expiring persistent sessions and CSRF
- [ ] Bounded MongoDB queries and atomic example updates
- [ ] Graceful shutdown, structured logs and metrics
- [ ] Linux release/container tooling and CI
- [ ] Migrated examples and language/deployment documentation
- [ ] Integration, fuzz, concurrency and 60-minute soak release gates
Existing user changes: two additional tests in src/main.rs and examples/twitter_clone/.