Staging drifts quietly; parity checks belong in CI—not tribal knowledge.
- Mirror TLS policies and minimum TLS versions.
- Seed representative data volumes, not just schemas.
- Align background workers and cron cadence where feasible.
- Test DNS failure modes with simulated NXDOMAIN and slow resolvers.