Start with a non-production deployment, validate health/status endpoints, and confirm no-custody boundaries.