Canonical extracted runtime target:

• http://localhost:4024

Public and admin route checks

• GET /butkhuzi/norms
• GET /butkhuzi/suggest
• GET /butkhuzi/search
• POST /butkhuzi/upsert
• POST /butkhuzi/chunks/rebuild

Search and suggest checks

• same query against old host and new host returns matching ok, result count, and stable shape
• source filtering by sourceKey and sourceVersion matches
• search missing-query denial path matches
• pagination/meta behavior on norms and search matches

Auth-protected mutation and admin checks

• POST /butkhuzi/upsert without bearer token
• POST /butkhuzi/chunks/rebuild without bearer token
• POST /butkhuzi/upsert with stable authenticated fixture if available
• POST /butkhuzi/chunks/rebuild with stable authenticated fixture if practical

Env cutover checks

• gateway fallback mode with default TENDERS_SERVICE_URL
• gateway cutover mode with BUTKHUZI_SERVICE_URL=http://localhost:4024
• route shape unchanged through gateway
• auth behavior unchanged through gateway

Rollback checks

• remove or unset BUTKHUZI_SERVICE_URL
• confirm gateway returns to old colocated Butkhuzi host
• verify one read route and one denial/auth-protected route after rollback

Notes

• this checklist assumes parity for current Butkhuzi behavior, not a changed product boundary
• migrations remain old-host-owned for now and are not part of the first parity claim