# First tenant execution runbook

Step-by-step **operational** runbook for the **first** (or each **pilot**) live tenant. Pair with [`live-tenant-admission-policy`](live-tenant-admission-policy.md) and [`pilot-tenant-management`](../operations/pilot-tenant-management.md).

**Roles:** CSM (customer), Integration owner (internal), On-call (as needed), Finance (payroll).

---

## Phase A — Onboarding

| Step | Action | Owner | Done |
|------|--------|-------|------|
| A1 | Confirm admission approved; ticket links to admission record | CSM | ☐ |
| A2 | Tenant provisioned; roles and MFA verified | Eng/Ops | ☐ |
| A3 | Training session completed; “how to escalate” shared | CSM | ☐ |
| A4 | Data migration / import: snapshot IDs, exceptions logged | Integration | ☐ |
| A5 | Customer success criteria signed (email or ticket) | CSM | ☐ |

---

## Phase B — Payroll setup validation

| Step | Action | Owner | Done |
|------|--------|-------|------|
| B1 | Legal entities, periods, calendars configured | Customer + CSM | ☐ |
| B2 | **Dry-run** or parallel period in non-prod or agreed sandbox | Integration | ☐ |
| B3 | Sample outputs reviewed with Finance (totals, edge employees) | Finance | ☐ |
| B4 | Pay date on calendar; **freeze window** acknowledged | CSM | ☐ |
| B5 | Protection rules understood: no ad-hoc DB edits on finalized payroll | CSM | ☐ |

If any B-step fails: **stop** before first live payroll; escalate per [`live-support-escalation-flow`](live-support-escalation-flow.md).

---

## Phase C — Integration validation

| Step | Action | Owner | Done |
|------|--------|-------|------|
| C1 | Each webhook URL reachable; auth secrets rotated post-test | Integration | ☐ |
| C2 | Test delivery **200** (or contractually OK); signature verified | Integration | ☐ |
| C3 | Dead-letter queue empty for test tenant; retry policy observed | Eng | ☐ |
| C4 | Partner contact and escalation path in ticket | CSM | ☐ |

Reference: [`webhook-retry-storm`](../operations/incident-playbooks/webhook-retry-storm.md) if failures spike.

---

## Phase D — Export verification

| Step | Action | Owner | Done |
|------|--------|-------|------|
| D1 | Trigger representative exports (types customer uses) | Customer/CSM | ☐ |
| D2 | Confirm completion within **documented** SLO or agreed pilot window | Integration | ☐ |
| D3 | Spot-check file integrity (row counts, headers, PII handling) | CSM | ☐ |

Reference: [`export-processing-backlog`](../operations/incident-playbooks/export-processing-backlog.md).

---

## Phase E — First payroll processing supervision

| Step | Action | Owner | Done |
|------|--------|-------|------|
| E1 | **T-1:** War-room check: queue depth, workers, DLQ, backup status | On-call | ☐ |
| E2 | **Pay day:** Monitor dashboards ([`live-operations-command-center`](live-operations-command-center.md)) | Integration + Eng | ☐ |
| E3 | Post-run: customer confirms payslips / disbursement handoff as applicable | CSM | ☐ |
| E4 | Log outcome in ticket; open follow-ups for any warning | CSM | ☐ |
| E5 | Schedule [`first-live-tenant-review`](../operations/first-live-tenant-review.md) (~30 days steady state) | CSM | ☐ |

---

## Escalation shortcuts

- Payroll stuck / wrong amounts: [`payroll-failure`](../operations/incident-playbooks/payroll-failure.md) + **no** silent data fixes.
- Queue down: [`queue-outage`](../operations/incident-playbooks/queue-outage.md).
- Comms: [`incident-communication-templates`](incident-communication-templates.md).