Production deployment

Runtime choice

Use Vercel previews for Next.js staging when that workflow fits the project. Use Cloud Run for containerized tools and services that need Google Cloud identity or runtime integration.

Cost posture

Cloud Run services begin with zero minimum instances when workload behavior permits. Any always-on configuration requires a reason, expected workload, estimate, and explicit approval.

Security posture

Use a dedicated service account, authenticated ingress, Secret Manager, resource limits, request timeouts, and least-privilege roles.

Release gate

Build and automated checks create a staging candidate. CollisionPT and mautomo are the named required reviewers for staging and production environments.