# Deployment acceptance — verification guide

Checklist only. No tests are claimed as executed by this document.

- Record hardware, OS and component versions.
- Verify per-peer keys, revocation and minimum AllowedIPs.
- Test permitted and denied firewall paths.
- Verify DNS and IPv4/IPv6 behavior.
- Test intended fail-closed behavior and safe recovery.
- Test restart and restore from a baseline backup.
- Inspect actual logs, retention and administrative privileges.
- Remove unnecessary services.
- Hand over configuration and recovery documentation.
- Record owner acceptance and unresolved limitations.

Keep private keys out of general audit reports.