# Microsoft Marketplace Provider Checklist

## Channel-specific gates

- [ ] Select an accepted Azure offer type that does not misrepresent DataAI as SaaS.
- [ ] Confirm all embedded artifacts use authorized immutable version 1.0.0.
- [ ] Build a functional AKS application and CNAB if the Azure Container route is approved.
- [ ] Approve public-registry exposure of proprietary container layers before using that route.
- [ ] Complete Partner Center certification, pricing, privacy, and support requirements.

## Common legal and product gates

- [ ] Yanbor LLC publisher identity, tax, banking, and partner enrollment are approved.
- [ ] License and commercial terms have completed legal review.
- [ ] Public support, privacy, terms, documentation, and company URLs are live.
- [ ] All placeholders are replaced and listing claims match tested behavior.
- [ ] No listing describes DataAI as a hosted service.

## Artifact and security gates

- [x] Full Maven release-artifact build passes locally with Java 17.
- [x] Every DataAI artifact uses immutable version `1.0.0`.
- [x] SHA-256 checksums pass for the local provider package.
- [ ] Complete any channel-required signing before submission.
- [x] JARs contain no bundled Spark or Hadoop classes.
- [ ] Container or repository artifacts contain no credentials, keys, tokens, customer data, or signed agreements.
- [ ] Vulnerability, malware, dependency, and license reviews are current.
- [ ] Installation, upgrades, rollback, and revocation are tested in a separate buyer environment.

## Publication authorization

- [ ] Pricing and fulfillment match the signed DataAI commercial model.
- [ ] Yanbor LLC authorizes the exact final files and external submission.
