Manual checklist
- API key rotation — ABR, Geoscape, OpenSanctions, RapidID (sandbox + prod). Track last-rotated dates here once a rotation schedule exists.
- Dependency audit — run
npm auditin easykyb_website periodically; wire up Dependabot once CEO sign-off is given. - D1 storage growth — check the Cloudflare dashboard's D1 usage panel monthly.